{"id":215667,"date":"2026-02-20T10:19:00","date_gmt":"2026-02-20T15:19:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/02\/20\/new-android-malware-uses-gemini-ai-to-learn-how-to-run-on-specific-devices\/"},"modified":"2026-02-20T10:55:09","modified_gmt":"2026-02-20T15:55:09","slug":"new-android-malware-uses-gemini-ai-to-learn-how-to-run-on-specific-devices","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/02\/20\/new-android-malware-uses-gemini-ai-to-learn-how-to-run-on-specific-devices\/","title":{"rendered":"New Android malware uses Gemini AI to learn how to run on specific devices"},"content":{"rendered":"<p><a href=\"https:\/\/www.howtogeek.com\/new-android-malware-uses-gemini-ai-to-learn-how-to-run-on-specific-devices\/\">New Android malware uses Gemini AI to learn how to run on specific devices<\/a><\/p>\n<p><a href=\"https:\/\/www.howtogeek.com\/new-android-malware-uses-gemini-ai-to-learn-how-to-run-on-specific-devices\/\">https:\/\/www.howtogeek.com\/new-android-malware-uses-gemini-ai-to-learn-how-to-run-on-specific-devices\/<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-02-20 10:19:00<\/a><\/p>\n<p>Source Domain: <a href=\"www.howtogeek.com\">www.howtogeek.com<\/a><\/p>\n<p>It\u2019s no secret that AI is being added to everything. The companies doing this want us to believe it\u2019s making our lives better, but AI is obviously being used in nefarious ways, too. A new discovery shows that Google\u2019s own Gemini AI is being used to help malware run on various Android devices.<\/p>\n<p>Researchers at ESET Cybersecurity recently uncovered a new type of malware that they\u2019re calling &#8220;PromptSpy.&#8221; It\u2019s different from malware in the past that has used machine learning. Android devices are all slightly different, and PromptSpy uses generative AI to adapt to each device in real time.<\/p>\n<p>Here\u2019s how it works: Almost all Android devices have some sort of feature that allows users to pin or lock an app to the Recent Apps list (not the same as App Pinning). This ensures that the app will remain running in the background even if the user hasn\u2019t opened it in a while. If an app isn\u2019t pinned, the Android OS will eventually close it to devote resources elsewhere. Malware can use this feature to sneakily stay active in the background.<\/p>\n<p>The problem for malware is that the way devices pin or lock apps varies greatly by manufacturer. So, PromptSpy feeds an XML dump of the current screen to Gemini, and Gemini uses that to identify the device and send the appropriate instructions for how to pin an app back to PromptSpy. It then attempts to pin the app, and it has Gemini double-check that it worked. This happens in a loop until it confirms the app has been successfully pinned.<\/p>\n<p>       &#8230;<br \/>\n<br \/><a href=\"https:\/\/www.howtogeek.com\/new-android-malware-uses-gemini-ai-to-learn-how-to-run-on-specific-devices\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>New Android malware uses Gemini AI to learn how to run on specific devices https:\/\/www.howtogeek.com\/new-android-malware-uses-gemini-ai-to-learn-how-to-run-on-specific-devices\/&#8230;<\/p>\n","protected":false},"author":1,"featured_media":215668,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/static0.howtogeekimages.com\/wordpress\/wp-content\/uploads\/2026\/02\/android-robot-logo-in-red.jpg?w=1600&h=900&fit=crop","fifu_image_alt":"","footnotes":""},"categories":[46],"tags":[70,32],"class_list":["post-215667","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-android","tag-google","tag-malware"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/215667"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=215667"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/215667\/revisions"}],"predecessor-version":[{"id":215669,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/215667\/revisions\/215669"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/215668"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=215667"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=215667"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=215667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}