What Happened: So, Google’s top security – Google’s Threat Intelligence Group, or GTIG – just found something that is frankly pretty terrifying. It’s a new type of malware they’re calling PROMPTFLUX.
- Get this: this new virus uses the same kind of AI that powers stuff like Google Gemini to rewrite its own code while it’s attacking. It’s a shapeshifter. Its whole goal is to constantly change itself so that antivirus programs and security systems can’t recognise it.
- Instead of following a pre-written, fixed script like most malware, this thing can “learn” and “adapt” on the fly, creating new attack methods as it goes.
- Now, for the good news: Google says this thing looks like it’s still in the testing phase. The samples they found had a bunch of unfinished parts, and it hasn’t actually been seen in the wild infecting anyone. They’ve already shut down the assets and accounts tied to it.

Why Is This Important: This is a massive “uh-oh” moment for the cybersecurity world.
- This is one of the very first, real-world examples of malware that uses AI to evolve on its own.
- Think about it: traditional antivirus works by recognizing the “signature” of a virus – a digital fingerprint. But if the virus can change its own fingerprint every few seconds, how do you catch it?
- This kind of adaptive malware could make all our old ways of detecting viruses almost useless, forcing the entire security industry to find a new strategy.

Why Should I Care: So why does this matter to you and me? Because it proves the AI arms race is officially on.
- While the good guys are using AI to build better defenses, the bad guys are using it to build smarter, faster, and scarier attacks.
- Google’s worried that a “black market” for these kinds of evil AI tools will pop up, which would mean that even low-skill, amateur hackers could get their hands on super-advanced, shape-shifting malware.
What’s Next: It’s exactly what it sounds like: this is now a full-blown AI vs. AI war.
- Google is already rolling out a new security framework specifically to defend its AI systems.
- They’re also building “counter-AI” programs (one is literally named “Big Sleep”) designed to hunt down and patch vulnerabilities before these new AI-powered threats can use them.
- From here on out, it looks like digital safety will all come down to one thing: whose AI is smarter.
