Back to today’s briefing

Story perspectives

Google Warns of Evasive AI Malware Threats

11/6/2025

43 6 Full Breakdown

Summary

Story summary

Google's Threat Intelligence Group (GTIG) warns that PROMPTFLUX uses artificial intelligence to dynamically change its code during execution, evading detection.
PROMPTFLUX, still in development, regenerates VBScript and saves it to the Windows Startup folder to persist.
The malware interacts with Google's Gemini AI model to adapt its behavior.
Other AI-driven threats, PROMPTSTEAL and QUIETVAULT, show data exfiltration and credential theft.

History

Historical Context

The Computer Fraud and Abuse Act (CFAA) was enacted in 1986 to address rising concerns about computer-related crimes, partly inspired by the film *WarGames*. Since then, amendments have expanded its scope, reflecting the evolving nature of cyber threats. By 2022, global cybercrime costs reached $6 trillion, underscoring the urgent need for updated legislation to combat sophisticated attacks like AI-driven malware.

1 of 2

Story summary

Google's Threat Intelligence Group (GTIG) warns that PROMPTFLUX uses artificial intelligence to dynamically change its code during execution, evading detection.
PROMPTFLUX, still in development, regenerates VBScript and saves it to the Windows Startup folder to persist.
The malware interacts with Google's Gemini AI model to adapt its behavior.
Other AI-driven threats, PROMPTSTEAL and QUIETVAULT, show data exfiltration and credential theft.

1 / 2