PromptSpy is the first documented Android malware to integrate generative AI directly into its operational flow to enhance persistence and data theft. The malware leverages Google Gemini to automate complex malicious tasks.

Key Features & Behavior

• AI-Driven Persistence: The malware sends prompts to Gemini to identify screen coordinates. This allows it to perform automated taps that keep the app “pinned” and prevent the user from closing it.
• Intelligent Data Extraction: It uses on-device LLM calls to parse unstructured screen data, such as usernames, passwords, and 2FA codes. It filters the most valuable information before sending it to a Command-and-Control (C2) server.
• Anti-Removal Tactics: PromptSpy generates invisible screen overlays that intercept touch events. This blocks users from clicking “Uninstall” or “Force Stop.”
• Remote Control: It includes a VNC module that gives attackers full remote navigation of the infected device.

Impact and Mitigation

Because the malware utilizes legitimate, on-device AI APIs, its malicious activity often mimics normal app behavior. This makes it harder for standard security software to flag.

To eliminate the threat, users should reboot their device into Safe Mode to disable third-party apps and manually remove the malicious software. This software is frequently disguised under the name “MorganArg.”