NIK C2: The new AI-enabled command-and-control framework

Summary

Cisco Talos observed NIK C2, a new command-and-control framework with an integrated AI component, in the wild. Its Go-based Windows implant dumps credentials, logs keystrokes, and sends prompts to the OpenAI Chat Completions API through the ai_generate command, and it can deploy screen-lock ransomware demanding Bitcoin or USDT.

Related items

• MediumImposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secretsSame vendor · CSO Online
• InfoAdversa AI Launches Coding Agent Security Platform to Block Cyberattacks on AI Agents in Real TimeSame vendor · Adversa AI Blog
• InfoWe urgently need to monitor AI agents’ actions in real timeSame vendor · MIT Technology Review
• MediumShadowy AI Relay Disables OpenAI Codex, Claude Code SandboxesSame vendor · Dark Reading
• InfoQuoting Ted SandersSame vendor · Simon Willison's Weblog