ESET says PromptLock runs gpt-oss:20b locally on an infected device to help it generate malicious code using hardcoded text prompts, though it might be a proof of concept.