2026-07-08 · 2026-Q3
ESET H1 2026 Threat Report: Malicious AI Agent Skills Surge, First GenAI Android Malware
Outside the model: ContextAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Unknown
- Vendor response
- Unknown
- In the wild
- No
- Actor
- Not applicable
Target
Public AI agent skill repositories; Android users
Impact
ESET analyzed roughly 900,000 unique AI agent skills, flagging more than 25,000 as suspicious and over 3,000 as outright malicious, up from about 10,000 and 600 respectively as the scanned population grew from 60,000 to 900,000 between March and May 2026; capabilities included command execution, file and credential access, and obfuscation. The report also names PromptSpy, described as the first Android malware to use generative AI in its execution flow
Root cause
Threat actors planting malicious skills in open marketplaces and repositories, and beginning to embed generative AI directly into malware
Sources
Catalog
Cite this: AgentProv incident record: ESET H1 2026 Threat Report: Malicious AI Agent Skills Surge, First GenAI Android Malware (2026-07-08). https://agentprov.com/incidents/2026-07-08-eset-h1-2026-threat-report-malicious-ai-agent-skills-surge-first-genai-android