{"version":1,"type":"story","url":"https://digestai.news/story/google-finds-ai-malware-that-rewrites-code-to-evade-detection","json":"https://digestai.news/story/google-finds-ai-malware-that-rewrites-code-to-evade-detection.json","markdown":"https://digestai.news/story/google-finds-ai-malware-that-rewrites-code-to-evade-detection.md","slug":"google-finds-ai-malware-that-rewrites-code-to-evade-detection","headline":"Google finds AI malware that rewrites code to evade detection","summary":"Google's Threat Intelligence Group identified experimental malware called PROMPTFLUX, which uses Gemini to rewrite its own code hourly to avoid signature-based detection. Although PROMPTFLUX was still in development and had not successfully compromised a device, it represents an early example of \"just-in-time\" AI integration in malware. Google also reported PROMPTSTEAL, used by the Russian government-backed group APT28 against targets in Ukraine, which queried the Qwen2.5-Coder-32B-Instruct model to generate Windows commands for data theft. This marked the first observed instance of malware querying a large language model during live operations.\n\nA third threat, PROMPTSPY, was an Android backdoor that used an AI module to understand on-screen content and navigate the interface, even placing invisible overlays to prevent uninstallation. Google stated that no apps containing PROMPTSPY were found on Google Play and that Play Protect detects known versions. In a broader report from September 8, 2026, Google noted attackers are moving toward agentic AI workflows, with one example involving a mass credential-harvesting campaign executed in under six hours using an AI coding chatbot. While fully autonomous exploit pipelines have not yet been observed in the wild, the trend indicates AI is taking on larger roles in cyberattacks.\n\nThe volume of new malware remains high, with AV-TEST registering over 450,000 new malicious programs daily. The FBI reported nearly $21 billion in cyber-enabled crime losses in the US during 2025, a 26% increase from the previous year. Experts advise users to maintain real-time behavioral detection, keep software updated, and avoid pasting commands from untrusted websites.","keyPoints":["PROMPTFLUX malware uses Gemini to rewrite its code hourly to evade signature-based security detection.","APT28 used PROMPTSTEAL in live attacks, querying Qwen2.5-Coder-32B-Instruct to generate Windows commands.","Google reports attackers are shifting to agentic AI workflows, with one campaign harvesting credentials in six hours."],"whyItMatters":"AI-powered malware that rewrites itself or reacts to device state challenges traditional signature-based defenses. This shift forces security tools to rely more on behavioral analysis and highlights the growing automation of cyberattacks.","category":{"slug":"policy","name":"Policy & Regulation","url":"https://digestai.news/category/policy"},"entities":{"companies":["Google","Microsoft","ESET","AV-TEST","FBI"],"models":["Gemini","Qwen2.5-Coder-32B-Instruct"],"people":["Kurt Knutsson"]},"firstPublishedAt":"2026-09-22T05:17:00Z","updatedAt":"2026-09-22T05:17:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"foxnews.com","title":"AI malware can rewrite itself to evade detection","url":"https://foxnews.com/tech/ai-malware-rewrite-itself-evade-detection","publishedAt":"2026-09-22T05:17:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":null,"cite":{"text":"Digest AI, \"Google finds AI malware that rewrites code to evade detection\", 22 September 2026, https://digestai.news/story/google-finds-ai-malware-that-rewrites-code-to-evade-detection","publisher":"Digest AI","title":"Google finds AI malware that rewrites code to evade detection","datePublished":"2026-09-22T05:17:00Z","url":"https://digestai.news/story/google-finds-ai-malware-that-rewrites-code-to-evade-detection"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}