Executive Summary
ESET says true AI-powered malware is still rare, citing PromptSpy as the first Android malware to abuse generative AI at runtime.
What Happened
ESET says true AI-powered malware remains rare in real-world environments and that most attacks still rely on traditional methods such as phishing, ransomware, credential theft, and malicious websites. The post cites PromptSpy, which ESET says was the first known Android malware to abuse generative AI during execution, and distinguishes it from proof-of-concept systems such as PromptLock.
Affected Products
- Android
Vulnerability / Attack Technique
AI-powered malware (assessment)
Technical Mechanism
Malware calls generative AI during execution.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
Most attacks remain traditional; AI malware is emerging.
Recommended Controls
- Focus on fundamentals first
Related RealGround Service
AI Red Teaming · or start with the free AI Agent Security Scanner.
Sources
ESET: https://www.eset.com/blog/en/business-topics/threat-landscape/smbs-ai-malware/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.