Android malware just learned to ask for directions — from Gemini

A new strain of Android spyware called PromptSpy has put a chill in the security world by doing something we’ve only warned about in hypotheticals: it queries a large language model at runtime to decide what to do next. Instead of relying solely on brittle, hardcoded scripts that break across phone models and launchers, PromptSpy asks Google’s Gemini to interpret what’s on the screen and return step-by-step gestures to keep itself running and hard to remove.

It sounds like sci‑fi. It’s real. And even if this particular sample looks like a limited proof of concept, the implications are worth taking seriously.

Why this matters

• PromptSpy is the first reported Android malware to integrate generative AI into its execution flow. That means an attacker can outsource part of the “how” to a model that understands language and UI descriptions, rather than trying to write brittle device‑specific navigation code. (globenewswire.com)
• The malware uses Gemini to analyze an XML “dump” of the screen (UI element labels, class names, coordinates) and asks the model how to perform gestures (taps, swipes, long presses) to, for example, pin the malicious app in the Recent Apps list so it can’t be easily swiped away. That persistence trick — paired with accessibility abuse and a VNC module — turns a compromised phone into a remotely controllable device. (globenewswire.com)
• This isn’t yet a massive outbreak. ESET’s initial research and telemetry don’t show widespread infections; distribution appears to be via a malicious domain and sideloaded APKs (not Google Play). Still, the technique expands the attacker toolbox. (globenewswire.com)

The anatomy of PromptSpy (plain English)

• The app arrives outside the Play Store (phishing / fake bank site distribution).
• It requests Accessibility permissions — that’s the red flag to watch for. With those permissions it can read UI elements and simulate touches.
• PromptSpy captures an XML snapshot of what’s on screen and sends that, with a natural-language prompt, to Gemini.
• Gemini returns structured instructions (JSON) with coordinates and gesture types.
• The malware repeats the loop until Gemini confirms the desired state (e.g., the app is locked in the Recent Apps view).
• Meanwhile it can deploy a built-in VNC server to let operators observe and control the device, capture screenshots and video, and block uninstallation via invisible overlays. (globenewswire.com)

What the vendors are saying

• ESET, which discovered PromptSpy, named and analyzed the family and warned about the adaptability that generative AI brings to UI-driven malware. They emphasized that the Gemini component was used for a narrow but strategic purpose — persistence — and that the model and prompts were hard-coded into the sample. (globenewswire.com)
• Google has noted that devices with Google Play Protect enabled are protected from known PromptSpy variants, and that the malware has not been observed in the Play Store. Google and other platforms are already using AI in defensive workflows, and Play Protect flagged the known samples. That said, the prescriptive takeaway from Google and researchers is: don’t sideload unknown apps and be suspicious of Accessibility requests. (helentech.jp)
• Security teams have previously shown LLMs can be “prompted” into unsafe actions (so‑called prompt‑exploitation), and other threat research has already demonstrated experiments where malware queries LLMs for obfuscation or evasion tactics. PromptSpy is the first high‑profile example of a mobile threat using a model to make runtime UI decisions. (cloud.google.com)

Practical advice for users and admins

• Treat Accessibility permission requests as extremely sensitive. Only grant them to well-known, trusted apps that explicitly need them (e.g., assistive tools you intentionally installed). PromptSpy relies on Accessibility abuse to operate. (globenewswire.com)
• Keep Play Protect enabled and your device updated. Google says Play Protect detects known PromptSpy variants and the sample was not found in Google Play — meaning the main exposure vector is sideloading. (helentech.jp)
• Don’t install APKs from untrusted websites. Even a convincing “bank app” landing page can be a trap.
• If you suspect infection: reboot to Safe Mode (which disables third‑party apps) and uninstall the suspicious app from Settings → Apps. If removal is blocked, Safe Mode should allow you to remove it. (globenewswire.com)
• Enterprises should monitor for unusual Accessibility API usage and VNC‑like activity, and enforce app installation policies that block sideloading where possible.

Bigger picture: a step change in attacker workflows

PromptSpy is not a finished army of super‑malware; it’s an inflection point. A few things to keep in mind:

• Outsourcing UI logic to an LLM lowers the development cost and time for attackers who want their malware to work across many devices and OEM interfaces. That expands the potential victim pool without requiring extensive per‑device engineering. (globenewswire.com)
• Right now the model and prompts were embedded in the sample, not letting the attacker dynamically reprogram behavior on the fly. But as attackers iterate, we can expect more dynamic patterns: just‑in‑time code snippets, adaptive obfuscation, or model‑assisted social engineering. (globenewswire.com)
• Defenders are also using AI. Google and other vendors are integrating generative models into detection and app review. That creates an arms race where models will be used on both sides — but history shows defensive systems must evolve faster than attackers to keep users safe. (tech.yahoo.com)

My take

PromptSpy should be a wake‑up call, not a panic button. The malware demonstrates a plausible and worrying technique — using an LLM to adapt UI interactions in the wild — but it also highlights where traditional defenses still work: cautious app sourcing, permission hygiene, Play Protect and safe removal procedures. The bigger risk is what comes next, not this single sample: models make it easier to automate tasks that were once fiddly and fragile. Expect attackers to test and reuse these ideas, and expect defenders to double down on detecting model‑assisted behavior.

Security in an era of ubiquitous generative AI is going to be a cat‑and‑mouse game where the mice learned to read maps. Keep your guard up.

Readable summary

• PromptSpy is the first widely reported Android malware to query a generative model (Gemini) at runtime to adapt UI actions for persistence. (globenewswire.com)
• It relies on Accessibility abuse, has a VNC component, and was distributed outside the Play Store. Play Protect reportedly detects known variants. (globenewswire.com)
• Protect yourself by avoiding sideloads, rejecting suspicious Accessibility requests, keeping Play Protect and updates enabled, and using Safe Mode removal if needed. (globenewswire.com)

Sources

• ESET Research discovers PromptSpy, the first Android threat to use generative AI — ESET press release.
  https://www.globenewswire.com/news-release/2026/02/19/3241357/0/en/ESET-Research-discovers-PromptSpy-the-first-Android-threat-to-use-generative-AI.html

• Android malware is now using Google’s own Gemini AI to adapt in real time — Android Authority.
  https://www.androidauthority.com/android-malware-promptspy-uses-generative-ai-gemini-3642832/

• PromptSpy Android malware abuses Google Gemini AI for persistence — CyberInsider (technical breakdown).
  https://cyberinsider.com/promptspy-android-malware-abuses-google-gemini-ai-for-persistence/

• Google says its AI systems helped deter Play Store malware in 2025 — reporting on Play Protect and Google’s stance.
  https://tech.yahoo.com/ai/gemini/articles/google-says-ai-systems-helped-212739930.html

• GTIG AI Threat Tracker: Experimental malware using Gemini for self‑modification — Google Cloud blog (background on LLMs being experimented with in malware).
  https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools

A busy Saturday at the Games: bronze curling, Stolz back on the ice, and more drama

The sound of stones colliding and blades slicing ice — that’s the rhythm of a Winter Games Saturday. Milan Cortina delivered a little bit of everything: an emotional bronze-medal curling matchup between the U.S. and Canada, Jordan Stolz returning to the ice with Olympic expectations on his shoulders, and a slew of results that kept the medal table in constant motion. If you want a snapshot of why these Games feel so alive, this Saturday was your primer.

Why this day mattered

• Curling’s bronze match wasn’t just another consolation game. Team USA was playing for its first-ever Olympic women’s curling medal — and Canada, led by Rachel Homan, came in as the favorite and a standard-bearer for the sport.
• Jordan Stolz’s return to competition kept the spotlight on one of the Olympics’ breakout stars. After earlier wins, every race he skated carried the possibility of history — and the inevitable weight of expectation.
• Beyond those headline stories, Saturday’s slate illustrated a recurring theme in Milan Cortina: veteran experience meeting youthful audacity, and the small margins that separate podium glory from heartbreak.

Highlights from the day

• Canada beat Team USA 10–7 to claim bronze in the women’s curling. It was a back-and-forth match that turned decisively in Canada’s favor in the middle ends, when a three-point end opened a gap the Americans couldn’t fully close. For the U.S., finishing fourth tied its best Olympic result in women’s curling; for Canada, it was the sport’s long-awaited return to the podium. (See coverage from NBC Olympics and Sports Illustrated.) (nbcolympics.com)

• Jordan Stolz continued to be the storyline in speed skating. The 21-year-old American—already a multiple-world champion and Olympic gold medalist at these Games—returned to contest additional distances, drawing comparisons to historic U.S. skaters and stoking talk of multi-gold runs. Broadcasters and previews framed him as a potential multi-event champion and a face of these Games. (nbcolympics.com)

• The day’s action reinforced an Olympic truth: momentum swings fast. One missed draw, one tactical miscue, or one perfectly timed sprint can rewrite a team’s destiny — whether that’s a curling squad aiming for history or a skater chasing another podium.

What the curling result tells us

• Experience and composure won out. Rachel Homan’s Canadian rink leaned on its pedigree in the middle ends, turning a close early game into a comfortable margin.
• Team USA showed it belonged in the conversation. Reaching the bronze match — and matching the country’s best Olympic finish in the sport — marks clear progress for U.S. women’s curling and gives the program momentum heading into the next Olympic cycle.
• The margin for error at this level is tiny. A couple of misses in a crucial end were enough to tilt the game; that’s the kind of lesson teams study for years.

What Stolz’s presence means for the Games

• He’s both an engine and a measuring stick. Stolz’s run of fast times and record-setting performances has energized U.S. speed skating and raised the competitive bar for rivals.
• The “Stolz effect” radiates beyond medals. Young athletes and broadcasters alike gravitate to storylines of a young phenom chasing historic marks — which helps put speed skating and these Games in front of a broader audience.
• Pressure is real — and in sport, it’s a two-edged sword. Exceptional athletes thrive on it, but every return-to-race after a big win invites fresh scrutiny. That tension makes for compelling viewing.

Quick takeaways from Saturday

• Canada’s women’s curling program remains elite; the bronze was a reminder of depth and consistent execution.
• Team USA’s fourth place in women’s curling is progress — painful in the short term, promising for the long term.
• Jordan Stolz is the signature individual story of these Games: potential history-maker, headline magnet, and a focus for both fans and competitors.

My take

There’s something electric about a day that mixes team strategy (curling) with individual brilliance (speed skating). Saturday captured the Olympics’ dual identity: intimate tactical battles where a single shot matters, and broad heroic narratives where athletes chase their place in history. Team USA left Cortina with both frustration and optimism — a fourth-place finish stings, but it also signals that U.S. curling is closing the gap. And Stolz? He’s both a measuring stick for rivals and a reminder that the next Olympic legend can emerge at any age.

Sources

• Canada defeats U.S. for women's curling bronze; Team Peterson leaves Cortina in 4th place — NBC Olympics.
  https://www.nbcolympics.com/news/canada-defeats-us-womens-curling-bronze-team-peterson-leaves-cortina-4th-place. (nbcolympics.com)

• Team USA Women’s Curling Results: U.S. Falls Short of Bronze Medal in 10–7 Loss to Canada — Sports Illustrated.
  https://www.si.com/winter-olympics/team-usa-womens-curling-live-updates-bronze-medal-match-canada. (si.com)

• How to watch Jordan Stolz at the 2026 Milan Cortina Winter Olympics — NBC Olympics feature on Stolz.
  https://www.nbcolympics.com/news/how-watch-jordan-stolz-2026-winter-olympics. (nbcolympics.com)

• Jordan Stolz seeks third gold medal at Milan Cortina Olympics — NBC New York.
  https://www.nbcnewyork.com/news/jordan-stolz-speed-skating-milan-cortina-olympics/6464679/. (nbcnewyork.com)

• U.S. speedskating star Jordan Stolz wins gold in 1,000 meters, setting Olympic record — CBS News.
  https://www.cbsnews.com/amp/news/jordan-stolz-gold-1000-meters-record-time-olympics/. (cbsnews.com)

(News coverage and live updates consulted to shape perspective and context for this recap.)

The hug that changed the narrative: what Elana Meyers Taylor’s embrace of her nanny tells us about caregiving

The image is simple and powerful: Elana Meyers Taylor, gold medal around her neck at the 2026 Winter Olympics, bends down and hugs the woman who helped raise her children while she chased a lifetime dream. The first person she hugged after standing on sport’s highest podium was her nanny. That moment—captured in photos and shared across social media—did more than warm hearts. It pulled a spotlight onto the invisible labor and complex logistics that make elite achievement possible.

Why that hug resonated

• It interrupts the romantic myth of lone genius and replaces it with a truer story: success is a team sport.
• It makes visible a caregiver who usually operates offstage, reminding viewers that parenting and elite performance often rely on paid and unpaid support.
• It humanizes a champion who is also a mother of two children with special needs, showing the emotional and practical stakes behind every training run, flight, and night away from home.

Those reactions aren’t accidental. Commentators, parent advocates, and caregiving experts used the moment to sharpen a conversation that’s been quietly building: when public figures acknowledge their caregiving teams, it can reshape cultural expectations about work, family and who gets credit.

Context: Elana’s story and the caregiving reality

Elana Meyers Taylor’s gold was the culmination of a long career—five Olympics, multiple medals—and a life lived in public and private challenge: managing training, travel, injuries, and parenting two sons who are deaf and require specialized attention. She thanked a wide circle—her husband, her parents, and her nannies—then ran to hug Macy, the nanny who helps care for her children. That photo became shorthand for a larger truth: elite performance often rides on a scaffolding of care. (yahoo.com)

The moment also lands against stark statistics. Care.com’s 2026 Cost of Care Report finds nearly half of U.S. parents say they don’t have enough help, and many families spend roughly 20% of income on child care. The report lays bare the emotional and financial strain of piecing together childcare—something many working parents know intimately. When a world-champion athlete publicly credits her nanny, it validates an experience shared by millions: success frequently depends on paid caregivers and informal village networks. (care.com)

What this moment reveals about caregiving as infrastructure

• Care is core, not peripheral. From elite sport to corporate leadership, caregiving enables participation and peak performance. Acknowledging that publicly helps destigmatize the practical choices parents make—hiring nannies, relying on relatives, or creating hybrid care plans.
• Visibility can drive respect. When public figures name caregivers in their victory narratives, they shift how society values caregiving work—encouraging respect, fair wages, and professional recognition rather than secrecy or embarrassment.
• The gap between gratitude and policy. A hug is symbolic and beautiful; policy change is the structural next step. Families still face unaffordable care, burnout, and career trade-offs. Visibility should be a step toward concrete supports—subsidies, employer benefits, and accessible care options—so gratitude doesn’t remain performative. (care.com)

Cultural ripple effects

• Normalizing teamwork at home: When athletes and celebrities publicly credit caregivers, it validates building a “village” rather than hiding help. That can reduce shame around paid childcare and encourage parents to ask for the support they need.
• Elevating caregiver professionalism: Spotlight moments can reframe nannies, family members, and childcare workers as skilled contributors to household stability and professional success—not just “help.”
• Sparking public conversation: Images from stadiums and podiums travel fast. They can prompt news cycles, op-eds, parenting communities, and policymakers to reexamine caregiving’s social value—and to demand better supports. (yahoo.com)

Practical implications for families and employers

• For parents: owning your caregiving network publicly (when comfortable and safe) can normalize the reality that no one does it all alone. It also opens conversations with employers about flexible schedules and caregiving benefits.
• For employers: visible moments like this are a reminder that benefits matter—employer-subsidized childcare, flexible leave, and caregiver resources aren’t perks; they remove barriers that keep talented people from contributing their best.
• For policymakers: the crisis in care is measurable and costly. Reports show measurable economic harm when caregiving is under-resourced; policy responses (tax credits, expanded subsidies, investment in childcare infrastructure) would reduce that drag. (care.com)

Takeaways worth keeping

• Public gratitude matters—it humanizes success and makes caregiving visible.
• Visibility alone isn’t enough; it should fuel respect, better pay and real policy fixes.
• Caregiving is infrastructure: when it’s stable and affordable, more people can pursue demanding careers, including in sport and other high-performance fields.

My take

That hug on the podium was more than a touching image; it was a quiet rebuke to cultural stories that equate success with singular sacrifice. Elana Meyers Taylor’s embrace acknowledged a truth many parents live: achievement usually rests on a web of relationships, labor, and love. Let that image do more than make us feel good—let it nudge us toward practical change that honors and sustains the caregivers who make so much possible.

Sources

• The first person she hugged was her nanny: The Olympic moment sparking a conversation about caregiving — Yahoo.
  https://www.yahoo.com/lifestyle/family-relationships/article/the-first-person-she-hugged-was-her-nanny-the-olympic-moment-sparking-a-conversation-about-caregiving-233055377.html

• 2026 Cost of Care Report: Uncovering the Hidden Struggles of Families — Care.com.
  https://www.care.com/c/cost-of-care-report/

• Elana Meyers Taylor's Family: All About the Olympian Bobsledder's Husband and Kids — People.
  https://people.com/all-about-elana-meyers-taylor-family-husband-kids-11907747

• Elana Meyers Taylor’s victory in her fifth Olympics was about far more than gold — The Guardian.
  https://www.theguardian.com/sport/2026/feb/17/elana-meyers-taylor-monobob-olympic-gold-medal