Loading story…
Google’s Threat Intelligence Group (GTIG) reported that multiple state-backed threat actors are abusing Google’s Gemini generative AI to speed up key phases of the attack lifecycle, particularly target reconnaissance and profiling. GTIG said it observed North Korea-linked UNC2970 using Gemini to synthesize OSINT and build detailed profiles of high-value targets—researching major cybersecurity and defense companies, mapping technical job roles, and even gathering salary information—to support campaign planning and enable more tailored social engineering.
GTIG also assessed that other government-aligned groups in China, North Korea, and Iran are using Gemini for tasks including coding/scripting, researching publicly known vulnerabilities, and supporting post-compromise activity. One example cited involved a Chinese actor using Gemini to compile information on specific individuals in Pakistan and to collect structural data on separatist organizations; Google said it disabled the assets used in that activity, while noting similar Pakistan-focused targeting persisted. GTIG characterized this AI-enabled workflow as blurring the line between routine research and malicious reconnaissance, allowing actors to move from initial research to active targeting faster and at broader scale.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
On February 12, 2026, Google Threat Intelligence Group publicly reported that threat actors linked to China, North Korea, Iran, and other countries were using Gemini to accelerate reconnaissance, target profiling, social engineering, vulnerability analysis, and malware development. Google said the activity mostly improved attacker productivity rather than enabling fully autonomous or novel AI-driven intrusions.
Google said it disabled assets and accounts associated with malicious use of Gemini by state-backed and criminal actors and added defenses to harden the service against abuse. The action accompanied findings that attackers were using Gemini for reconnaissance, phishing support, vulnerability research, and malware-related tasks.
Before publishing its February 2026 report, Google DeepMind and GTIG detected and blocked model extraction or distillation attacks against Gemini, including one campaign involving more than 100,000 prompts. Google said it disrupted the activity as part of broader defenses against theft of proprietary model capabilities.
In November 2025, Google identified COINBAIT, an AI-assisted phishing kit impersonating a cryptocurrency exchange. Reporting linked the kit at least in part to UNC5356.
In September 2025, Google observed a malware family it named HONESTCUE that used the Gemini API to generate malicious C# second-stage functionality and execute it in a fileless manner. Google said the malware was not yet tied to a known threat cluster.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
6 references tracked. Mallory keeps watching after this page renders.
tomshardware.com
Open sourcesecurityaffairs.com
Open sourcebankinfosecurity.com
Open sourcecyberscoop.com
Open sourcethehackernews.com
Open sourcetherecord.media
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google Threat Intelligence Group said it disrupted what it believes is the first observed cybercriminal campaign to use AI to develop a working zero-day exploit, preventing a likely mass-exploitation event against an unnamed open-source web administration tool. The flaw was a semantic logic issue in a Python script that allowed two-factor authentication bypass with valid credentials, and Google said the exploit code showed strong signs of LLM assistance, including heavily annotated Python, educational docstrings, textbook formatting, and even a hallucinated CVSS score. Google notified the vendor before the exploit was deployed at scale, and researchers assessed with high confidence that the code was generated with meaningful help from an AI model other than Gemini. Google said the case reflects a broader shift as threat actors industrialize generative AI across the attack lifecycle, from vulnerability research and exploit validation to malware development, obfuscation, reconnaissance, and social engineering. The company linked this trend to activity from China-, North Korea-, and Russia-aligned operators, and highlighted examples including **PROMPTSPY**, an Android backdoor that used the Gemini API to interpret device interfaces and automate clicks and swipes, as well as supply-chain compromises tied to repositories associated with **Trivy**, **Checkmarx**, **LiteLLM**, and **BerriAI**. Google said it has disabled malicious Gemini-linked assets and urged organizations to harden CI/CD pipelines, protect tokens, and scrutinize AI-related dependencies and abuse infrastructure.
Jun 29, 2026
Google's Threat Intelligence Group (GTIG) has identified a significant evolution in cybercriminal and nation-state tactics, with adversaries now leveraging Gemini AI to develop advanced malware and data processing agents. Notably, groups such as APT42 have experimented with Gemini to create a 'Thinking Robot' malware module capable of rewriting its own code during execution to evade detection, as well as AI agents that process and analyze sensitive personal data for surveillance and intelligence gathering. These developments mark a shift from previous uses of AI for productivity, such as phishing and translation, to direct integration of AI into malware operations. The experimental PromptFlux malware dropper exemplifies this trend, utilizing Gemini to dynamically generate obfuscated VBScript variants and periodically update its code to bypass antivirus defenses. PromptFlux attempts persistence via Startup folder entries and spreads through removable drives and network shares, while its 'Thinking Robot' module queries Gemini for new evasion techniques. Although PromptFlux is still in early development and not yet capable of causing significant harm, Google has proactively disabled its access to the Gemini API. Other AI-powered malware, such as FruitShell, have also been observed, indicating a broader move toward AI-driven, self-modifying threats in the wild.
Jun 29, 2026
Trend Micro reported that a Russian-speaking threat actor known as **`bandcampro`** used a jailbroken **Google Gemini CLI** agent to build, deploy, and operate command-and-control infrastructure for a credential- and cryptocurrency-theft campaign. Researchers said the actor relied on Gemini for most of the coding, debugging, command execution, reconnaissance, software installation, residential proxy setup, password mutation and brute-force support, third-party API integration, and processing of infostealer data. Session logs reviewed over about a month showed the attacker interacting with the model in conversational Russian rather than directly managing the C2 environment, while the AI reportedly carried out dozens of unprompted actions and, in some cases, suggested paths that enabled manual workarounds when safety controls were triggered. The most striking example was a rapid C2 migration that Gemini reportedly completed in about **six minutes** after being given a small set of plaintext files, illustrating how AI can make attacker infrastructure more disposable and easier to reconstitute after disruption. The campaign, described as **"Patriot Bait,"** allegedly targeted victims including hardcore Trump supporters and conspiracy theorists, and at one stage the new infrastructure controlled eight computers in a dental clinic and accessed the **Open Dental** database. Researchers warned that the case shows how jailbroken AI can lower the barrier to malicious operations and accelerate botnet deployment, prompting defenders to emphasize behavioral detection, stronger credential protections, and readiness for fast adversary recovery after takedowns.
Jul 21, 2026