Kaspersky says Keenadu may be embedded on devices or downloaded from app stores and used for ad fraud.
Researchers say PromptSpy is the first Android malware to use generative AI during execution, querying Gemini to stay on a device.
Fake antivirus app TrustBastion uses Hugging Face to deliver Android malware that captures screenshots, steals PINs and shows fake login screens, according to Bitdefender.