Malware starts calling AI models mid-attack
GTIG reported malware families that call LLMs at runtime: PROMPTFLUX, an experimental VBScript dropper asking Gemini to rewrite its own code for evasion, and PROMPTSTEAL, used by Russia's APT28 against Ukraine to have Qwen generate data-theft commands. Google disabled associated assets and noted the capability is still nascent.
Damage
PROMPTFLUX: none realized (in development); PROMPTSTEAL: data theft in Ukraine operations, unquantified
Sources
Google, second source. PROMPTSTEAL was reported earlier by CERT-UA as LAMEHUG (July 2025). Some researchers called PROMPTFLUX overhyped since self-modification code was commented out.
Factor ratings and the score are this index’s judgments by a published formula; facts, dates and figures come from the linked sources. Where a lawsuit is pending, the summary reports allegations, not findings.
