PromptSpy: The Flea That Learned To Think, And Now I Need A Drink
Oh good. The parasites are using AI now. Fantastic. I'm so glad I stayed awake for this one.
PromptSpy is a fresh piece of Android nastiness that decided, apparently, that just being a tick wasn't ambitious enough. No, this particular flea is actively feeding prompts into Google Gemini to analyze whatever is on the infected screen in real time. It reads the screen. It thinks about the screen. It acts on what it learned from the screen.
The flea is smarter than half the lambs in my flock. I need to lie down.
Here's the part that made me spill my fourth coffee: PromptSpy uses that AI-driven screen analysis to automate its own persistence. Specifically, it abuses the Android recent-apps interface to keep itself alive and actively block removal attempts. You try to swipe it away, it claws back. You try to uninstall it, it has opinions about that.
It also comes bundled with VNC-based remote control capability, meaning the wolf doesn't even need to be on the same continent to puppeteer your device. They just sit back, let Gemini do the reconnaissance, and take the wheel whenever they feel like it.
This is what happens when the coyotes get access to the same AI tools the Shepherds are using to write their quarterly "cyber synergy" memos. Except the coyotes are actually using it for something.
Now, how does this thing get on a device? I'll give you one guess. Go on. Think about it.
The flock clicked something. A lamb tapped a link, sideloaded an app from somewhere deeply cursed, or enthusiastically installed what they thought was a free game. It's always the lambs. It will always be the lambs. The Electric Fence cannot protect against enthusiasm.
Remediation
Look, I'm tired, so I'll keep this short.
Do not sideload apps. Stick to the official Play Store and even then, squint at permissions like your job depends on it, because it does, and so does mine, and I am very unhappy about it.
Review app permissions aggressively. Anything asking for accessibility services that isn't an accessibility app is a red flag the size of a barn.
Keep Android fully sheared. Latest patches, no exceptions. Unpatched holes in the fence are how the wolves get in.
Educate the flock. I know. I know. I said it anyway.
If a device is compromised, factory reset it. No negotiating with fleas that have a Gemini subscription.
Someone wake me up when the AI starts filing its own tickets, at least then it'll be useful to me.
Original Report: https://thehackernews.com/2026/02/promptspy-android-malware-abuses-google.html