This is the first malware for Android that uses generative AI

Cybersecurity researchers have identified the first malware for Android that uses generative artificial intelligence, called PromptSpy. This malicious program, which leverages Google’s Gemini technology, has the ability to capture data from the lock screen, block uninstallation attempts, and collect device information, in addition to taking screenshots and recording activity in video. Do not download anything unsafe PromptSpy is distributed through a dedicated website and has never been available on Google Play, suggesting that this malware campaign is designed for users in Argentina. According to the analysis, […]

Cybersecurity researchers have identified the first malware for Android that uses generative artificial intelligence, called PromptSpy.

This malicious program, which leverages Google’s Gemini technology, has the ability to capture data from the lock screen, block uninstallation attempts, and collect device information, in addition to taking screenshots and recording activity in video.

Do not download anything unsafe

PromptSpy is distributed through a dedicated website and has never been available on Google Play, suggesting that this malware campaign is targeted at users in Argentina. According to the analysis, there is evidence pointing to its development originating from a Chinese-speaking environment, as simplified Chinese debugging strings have been found.

The operation of PromptSpy is based on Gemini, which allows the malware to analyze the current screen and provides detailed instructions to ensure that the malicious application remains active in the recent list. This is achieved by using accessibility services, which forces users to restart the device in safe mode to uninstall the program. Interaction is done through a command and control server, giving attackers remote access to the victim’s device.

ESET researchers, who made the discovery, point out that PromptSpy represents a significant evolution of Android malware, using generative AI that allows it to adapt to different devices and operating system versions. This approach not only facilitates a more dynamic interaction but also makes it more complicated for users to eradicate it.

It has been indicated that the tactics employed suggest a possible financial objective on the part of the threat actors, highlighting the increasing sophistication of cyber attacks in the mobile space.

Google will compensate for purchases made on the Play Store during these years

Google has committed to compensating users who made purchases on its Google Play platform between 2016 and 2023 as part of an antitrust settlement. This agreement, which totals 599 million euros, will allocate 539 million euros for compensation to those affected. However, users must meet certain requirements to qualify. The requirements To receive compensation, users must have made at least one purchase on Google Play during the mentioned period and have a legal address in the United States. It does not matter where they currently reside or their origin […]

Google has committed to compensate users who made purchases on its Google Play platform between 2016 and 2023 as part of an antitrust settlement. This agreement, which totals 599 million euros, will allocate 539 million euros for compensation to those affected. However, users will need to meet certain requirements to qualify.

The requirements

To receive the compensation, users must have made at least one purchase on Google Play during the mentioned period and have a legal address in the United States. The current place of residence or the origin of the purchase does not matter; the key is the U.S. address during the time of activity on the platform. The company has started sending notifications about the process as of December 2, 2025, informing many users of the steps to follow without the need to complete complicated forms.

Payments will be made automatically through platforms like PayPal or Venmo, using the email address or phone number linked to the Google Play account. Amounts will range from 1.71 euros to 3.77 euros per user, although this range could slightly increase depending on each user’s spending history in the store.

It is important to keep in mind two key dates in the process: February 19, 2026, will be the deadline for users to opt out of the agreement or raise objections, while the final hearing to approve the agreement is scheduled for April 30, 2026. In addition to the compensations, the pact will also require Google to implement changes in the distribution policies and payment methods of its store, thus promoting greater competition in the market.

The new Android Trojan infects more than 11,000 devices worldwide

Cybersecurity researchers have discovered a new remote access trojan for Android devices called PlayPraetor that has infected over 11,000 devices in several countries, with a special focus on Europe and Latin America. This malware has shown explosive growth, with over 2,000 new infections per week, primarily targeting Spanish and French speakers, suggesting a strategic shift in its victim base. Fraud and data theft PlayPraetor stands out from other trojans by leveraging Android’s accessibility services to gain full remote control over the infected devices. The operators […]

Cybersecurity researchers have discovered a new remote access trojan for Android devices called PlayPraetor that has infected over 11,000 devices in several countries, with a special focus on Europe and Latin America. This malware has shown explosive growth, with more than 2,000 new infections per week, primarily targeting Spanish and French speakers, suggesting a strategic shift in its victim base.

Fraud and data theft

PlayPraetor stands out from other trojans by leveraging the accessibility services of Android to gain complete remote control over infected devices. The malware operators use this feature to display fraudulent login screens in over 200 banking and cryptocurrency applications, allowing for the theft of sensitive user data.

The trojan is part of a coordinated global operation and uses a malware-as-a-service (MaaS) model. PlayPraetor comes in various variants, each designed to execute different types of fraud. Its distribution methods include misleading advertising through ads on social media platforms and SMS sent to unsuspecting users, leading them to fake domains that host malicious applications.

In addition, PlayPraetor has the ability to monitor clipboard activity and log keystrokes, which allows attackers to carry out fraudulent actions without the victim noticing. The operation has been attributed to Chinese-speaking threat actors, and their campaigns resemble other recent criminal activities, such as those perpetrated by the ToxicPanda Trojan.

Researchers’ analyses highlight that the command and control panel of PlayPraetor not only facilitates real-time interaction with infected devices, but also allows the creation of counterfeit Google Play Store pages, amplifying its reach. With the sustained growth of this malware, the cybersecurity community remains vigilant against the evolution of these threatening fraud techniques.

An anime about Google Play? We're not delusional, it's the new project from the studio of Spy x Family

Wit Studio, known for its successful productions like Attack on Titan and Spy x Family, has taken a new step in its trajectory by launching a series of shorts in collaboration with Google Play. Titled Google Play De Cho Muso?! Tensei Shitara Android User datta, the series delves into the popular isekai genre, exploring the reincarnation of a gamer in a digital world designed by the app platform. Will the enemy be Apple Store? The protagonist of this story is Ando, a gamer who accidentally finds himself reincarnated in Google Play World, a universe where the skills of […]

Wit Studio, known for its successful productions like Attack on Titan and Spy x Family, has taken a new step in its journey by launching a series of shorts in collaboration with Google Play. Titled Google Play De Cho Muso?! Tensei Shitara Android User datta, the series delves into the popular isekai genre, exploring the reincarnation of a gamer in a digital world designed by the application platform.

Will the enemy be Apple Store?

The protagonist of this story is Ando, a gamer who accidentally finds himself reincarnated in Google Play World, a universe where video game skills are essential for survival and prosperity. Equipped with an Android smartphone and an arsenal of applications, Ando must face various challenges while navigating this new paradise for gamers. The series offers an innovative way to integrate gamer culture with the Google Play ecosystem, emphasizing the use of technological resources to advance the plot.

The first episode premiered on June 16 on Google Play’s YouTube channel and is available for free, with weekly updates culminating in the final episode scheduled for July 21. Daiki Yamashita, known for his role as Izuku Midoriya in Boku no Hero Academia, voices Ando. Under the direction of Yasuhiro Akamatsu, recognized for his work on Shingeki no Kyojin and Vampire in the Garden, the series also features the prominent Masaki Yuasa in visual development, promising a high-quality production.

Despite the short duration of the series, the collaboration between Google and Wit Studio forms a dream team that seeks to make the most of this blend of digital entertainment and gaming, thus consolidating a fresh and exciting proposal for anime fans.

Google Play welcomes government badges for public service apps

Google Play, the Android app store, is starting to distinguish governmental applications within its ecosystem. The chosen method, in fact, is that of badges that will show if an application has been officially developed by a public service so that citizens have an easier time searching for this type of applications.

Although it is a very interesting idea to easily find this type of applications, it is not the only service that is responsible for making these distinctions. An example of this is X, the former Twitter, whose verified seal turns gray if the account is part of a person or a governmental body. In this way, users easily find official profiles, instead of starting to follow fake accounts that try to impersonate them.

Android 14 Download

Not yet available in Spain

This service, as explained by 9to5google, is part of a strategy that aims to make life easier for users by showing which applications are official and government-related so that they can be found more quickly and not download replicas that try to imitate their appearance. Therefore, in addition to improving the quality of life for users, it also indirectly implies an improvement in security, since these applications that seek to imitate other services often contain malware, spyware or other harmful elements.

However, this government seal will not be seen in Spain yet, as it is not part of the first selection of countries that will have this identification. Thus, Google Play will have this service in the following countries: United States, United Kingdom, India, France, Germany, Canada, Australia, Brazil, Indonesia, Japan, Mexico, and United States.

Google Play Updates

The Google Play service is not only advancing in government representation, but also enhancing technical aspects such as downloads. In fact, in recent days, it has been confirmed that Google Play will allow downloading two applications simultaneously, something that significantly improves the performance of the application, which has been stuck in individual downloads for over 15 years.

On the other hand, Google is also continuing to work on the development of Android 15, the new major leap for all Android devices. Several weeks ago, some details of its beta version were revealed, although there are still several months of development ahead until Android 15 is released in early autumn.

Android 14 Download

Google makes the strangest mistake in Sonic’s history: not even SEGA understands what’s happening

The problem is that already from the first image, where they were supposed to talk about the ‘Sonic’ of 1991, they included Tails, who didn’t appear in the saga until the sequel. But the errors were just going to pile up one after another. One. After. Another.

There are times when the Internet gives us moments of absolute wonderful incomprehension, as if all the errors in the world came together in one gigantic and impossible to avoid. This is the case of what Google Play has given to the world today with its particular tribute to ‘Sonic’, taking advantage of the success of the Knuckles series on HBO Max. And I assure you that you didn’t see this coming.

Sonic DOWNLOAD

Cute Sonic

The idea was that the more you scrolled, the more the character would age over the years, and it was fun. The problem is that from the first image, where they were supposed to talk about Sonic from 1991, they included Tails, who didn’t appear in the saga until the sequel. But the errors were just going to accumulate one after another. One. After. Another.

Just to give a few examples: to illustrate the Sonic Frontiers, they uploaded an image from season 3 of ‘Sonic Prime’, which appeared this year; the illustration of Sonic from 1993 was from ‘Sonic Boom’ (2014); the one from 1996 was from ‘Sonic Dash’, the mobile game from 2013 from which the terrible image from the movie was originally taken (and modified) in 2020; the one from 2003 was a promotional image from ‘Sonic Jump’, from 2005… Well, you get it.

So much so that even the official account of the blue hedgehog replied to them saying “What are you doing”. Some believe it was a thread written by artificial intelligence, and that even ChatGPT provided the links to the images, and some think it was a strategy to anger the fans (for some reason) taking advantage of the character’s popularity.

In any case, Google has not given any explanations or deleted the thread, so we can only assume that someone on their team is really enjoying the chaos. The community manager is a fan of Nintendo. It couldn’t be anyone else.

Sonic DOWNLOAD