Credit: Joe Maring / Android Authority
TL;DR
- Researchers have identified the first known Android malware to use generative AI during execution.
- The malware queries Google’s Gemini model to adapt its behavior across different Android devices.
- It may be a proof-of-concept version, but it signals a shift toward more dynamic AI-assisted attacks.
Update: February 20, 2026 (05:12 PM ET): Following our request for comment and the publication of the original article below, a Google spokesperson provided us with the following statement:
“Based on our current detection, no apps containing this malware are found on Google Play. Android users are automatically protected against known versions of this malware by Google Play Protect, which is on by default on Android devices with Google Play Services. Google Play Protect can warn users or block apps known to exhibit malicious behavior, even when those apps come from sources outside of Play.”
