GoPlus reveals new Android malware PromptSpy, which uses AI large models to achieve remote control of devices

GoPlus Security warns users to be cautious of a new type of Android malware called PromptSpy. This malware lures users into downloading APK files through phishing websites (such as those disguised as bank websites) and can remotely control devices after obtaining accessibility permissions. What makes PromptSpy unique is its use of the Google Gemini API to analyze the device interface and formulate attack strategies, allowing it to better adapt to different phone brands and system versions, thereby increasing the stealth and success rate of its attacks.

Security recommendations:

• Avoid installing APKs from unknown sources
• Be cautious when granting accessibility permissions
• Enable Google Play Protect.