ESET: PromptSpy AI Malware Threatens South Africa's Businesses

• ESET's H1 2026 Threat Report revealed that cyber attackers are increasingly using AI to improve the efficiency and scale of their attacks.
• PromptSpy, an AI-powered Android malware, can evade security solutions and pose a significant risk to businesses in South Africa.
• QR code phishing has reached record levels, with 11% of all detected phishing e-mails carrying a QR code.
• Cyber criminals are exploiting the vulnerability of QR code phishing by directing victims to personal mobile devices outside corporate defences.

The most common purpose behind malicious AI skills is credential theft, the same objective that underpins most network intrusions.

ESET's H1 2026 Threat Report revealed that cyber attackers are increasingly using AI to improve the efficiency and scale of their attacks. The report, presented during a webinar on August 12, highlighted the growing threat of PromptSpy, an AI-powered Android malware that can evade security solutions. According to ESET's global telemetry, phishing accounts for 29.9% of threats targeting Africa, with SA alone experiencing a staggering 45.4%. This surge in phishing attempts is largely due to the use of QR code phishing, which has reached record levels and entered the top 10 threats for SA and Africa. Cyber criminals are exploiting this vulnerability by directing victims to personal mobile devices outside corporate defences.

The growing threat of AI-powered cyber attacks in South Africa highlights the need for lawyers advising clients on cybersecurity to be aware of these emerging threats. PromptSpy, an AI-powered Android malware, can evade security solutions and pose a significant risk to businesses. The use of QR code phishing has reached record levels, with 11% of all detected phishing e-mails carrying a QR code. This trend underscores the importance of exercising caution when receiving QR code phishing attempts, as they can bypass corporate defences. Lawyers should advise their clients to be vigilant and take necessary precautions to protect themselves against these threats.

The increasing use of AI in cyber attacks poses a significant threat to businesses in South Africa. PromptSpy, an AI-powered Android malware, can evade security solutions and pose a significant risk to businesses. The use of QR code phishing has reached record levels, with 11% of all detected phishing e-mails carrying a QR code. This trend underscores the importance of exercising caution when receiving QR code phishing attempts, as they can bypass corporate defences. Lawyers advising clients on cybersecurity should be aware of these emerging threats and advise their clients to take necessary precautions to protect themselves against these threats.

Lawyers advising clients on cybersecurity should be aware of the growing threat of PromptSpy, an AI-powered Android malware that can evade security solutions. They should also advise their clients to exercise caution when receiving QR code phishing attempts, as these have reached record levels and can bypass corporate defences.

Source: Original reporting via ESET H1 2026 Threat Report