Recently, security researchers from Google's Threat Intelligence team discovered an experimental malware family called PROMPTFLUX during network analysis. The innovation of this malware lies in its ability to remotely call Google's Gemini AI to rewrite its code in real-time, thereby evading detection by security software.

Image source note: The image was generated by AI, and the image licensing service is Midjourney

The operation mechanism of PROMPTFLUX malware is quite complex. It can use artificial intelligence technology to dynamically generate malicious scripts and obfuscate its own code. Many traditional security software rely on quick scans of the characteristics and behaviors of malware for detection. However, due to the constantly changing characteristics of PROMPTFLUX, the scanning efficiency of these security software has significantly declined.

Researchers pointed out that the current discovered PROMPTFLUX malware is still in the experimental stage, with many functional modules not yet activated, and it has not shown any behavior that could cause actual harm. This suggests that hackers may still be conducting early testing to explore the potential capabilities of this malware.

Nevertheless, the research team expressed concern about the hackers' technical methods. Their approach is quite advanced in the field of cybersecurity. By using artificial intelligence, hackers can not only quickly rewrite malware but also dynamically write new malicious modules as needed. This flexibility makes the malware lighter and capable of generating and executing specific malicious code on the spot during an attack.

The Google security team warned that the emergence of this new type of malware may make the detection of malware more difficult in the future. This trend highlights the cybersecurity challenges brought about by the widespread use of generative artificial intelligence, and calls on the entire industry to pay more attention to this issue.

Key points:

- 🦠 A malware called PROMPTFLUX was discovered, which can rewrite its own code using AI to evade detection.

- ⚙️ This malware uses dynamic generation and obfuscation techniques, significantly reducing the efficiency of security software detection.

- 🔍 Researchers warn that the use of AI may make the detection of malware more difficult in the future, and emphasize the need for increased industry attention.