Loading malware…
PROMPTFLUX is an experimental AI-enabled VBScript malware family best characterized as a dropper that uses Google Gemini during execution to rewrite or obfuscate its own source code. It represents an early documented example of malware embedding a large language model as an active runtime component rather than using AI only during development. Its core tradecraft is just-in-time self-modification: the malware queries Gemini to generate altered VBScript variants, producing polymorphic samples intended to reduce the effectiveness of static signatures and traditional endpoint detections.
PROMPTFLUX has been described as making live API calls to Gemini, including Gemini 1.5 Flash, to regenerate portions of its code between runs. Reported behavior includes writing regenerated script versions back to disk, staging modified copies for continued execution, and using startup-folder persistence. Some reporting also describes limited propagation attempts via removable media and network shares, though this appears less consistently corroborated than its self-rewriting and persistence behavior. The family has also been associated with attempts to disguise activity and support follow-on execution through dropper functionality.
The malware targets Windows systems and is notable primarily for defense evasion through runtime polymorphism. Multiple reports characterize it as under active development or proof-of-concept in nature rather than a mature, widely deployed family. It has been cited alongside other AI-enabled malware such as PROMPTSTEAL, HONESTCUE, QUIETVAULT, and PROMPTSPY as evidence of adversaries operationalizing LLM-assisted malware behavior. Attribution to a specific threat actor is not established at high confidence, although some reporting assesses financially motivated development activity and broader state-linked experimentation with similar AI-enabled techniques.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
19 distinct techniques documented for this family, organized by ATT&CK tactic.
threat actors are using large language models to write polymorphic loaders... Public reporting now names specific actor clusters in the wild... APT27... used Gemini to accelerate development of fleet management tooling... APT45... sending thousands of repetitive prompts that recursively analyze CVEs and validate proof-of-concept exploits
PromptFlux VBScript dropper that queries Gemini to generate obfuscated VBScript variants for AV evasion.
...two newly disclosed malware families that leverage AI for evasive techniques such as polymorphism...
PROMPTFLUX makes live calls to the Gemini API to dynamically modify itself, HONESTCUE queries Gemini at runtime to request specific VBScript obfuscation routines just-in-time so the bytes on disk at minute zero differ from the bytes at minute thirty.
Promptflux : A self-morphing dropper that calls the Gemini API to periodically rewrite its own source code, bypassing static signature-based detection.
„…PROMPTFLUX… ein sogenannter ‘Dropper’, der seine maliziöse Aktivität mit Hilfe eines Fake-Installationsprogramms verbirgt.“ / „Die Malware tarnt sich als Programm zur Bildgenerierung…“
PromptFlux is a POC malware sample that abuses Gemini-like services for command-and-control operations. | The malware exploits Gemini API access to receive instructions or exfiltrate data, often using hard-coded keys or unauthorized requests.
Promptflux : A self-morphing dropper that calls the Gemini API to periodically rewrite its own source code
3 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Full values are available in Mallory.
File hashes (MD5, SHA-1, SHA-256) from samples and reports.
41 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
VBScript dropper that uses an LLM during execution to generate obfuscated variants intended to evade antivirus detection.
An autonomous malware framework described as using LLMs to rewrite its own malicious functions on the fly, generating polymorphic variants to evade EDR detection.
AI-enabled dropper that uses Google Gemini via a hardcoded API key to rewrite its own VBScript source between runs, enabling polymorphism and evasion.
A loader that dynamically modifies itself at runtime via Gemini API calls to enable rapid polymorphism and evasion.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.