Attackers in H1 2026 are scaling their operations by adapting familiar techniques to new platforms, with AI increasingly used in both attack infrastructure and malware. ESET reported nearly 900,000 AI skills analyzed, the emergence of PromptSpy as the first known Android malware to use generative AI, and continued growth in ClickFix, quishing, and EDR killer use. #PromptSpy #Gemini #ClickFix #quishing #EDRkillers #ESET
Keypoints
- Attackers are improving efficiency by reusing proven techniques on new platforms.
- ESET found tens of thousands of suspicious AI skills and thousands of malicious ones.
- PromptSpy is the first known Android malware to use generative AI in its execution flow.
- ClickFix attacks have expanded into AI help pages, browser extensions, and cloud authentication.
- Quishing and EDR killer use both increased, showing evolving phishing and ransomware tactics.