Observed incident

Google documents Gemini misuse for intrusion support and experimental malware

Reported

What happened

Google reported China-nexus operators seeking Gemini assistance with phishing and exploitation, alongside PROMPTFLUX experiments that requested malware code mutations.

Parties and reporting

AI tools and systems: Gemini, PROMPTFLUX

Outcome

Google disabled associated assets and strengthened safeguards; it described PROMPTFLUX as experimental and unable to compromise a victim device in its observed state.

Operating lesson

Monitor malicious workflows and account behavior, including repeated attempts to disguise offensive requests as research.

Evidence and limits

Attribution and AI-use findings are Google's assessment. Experimental malware activity is not evidence of a successful PROMPTFLUX intrusion.

Sources