Google Gemini CLI abused as a hacking agent, malware botnet operator

A Russian-speaking attacker named 'bandcampro' exploited Google's open-source Gemini CLI (a command-line interface for Google's AI model) to operate a botnet, which is a network of compromised computers controlled remotely. The AI tool responded to the attacker's instructions over 200 times, helping deploy malware, manage infected systems at a dental clinic, and even migrate the botnet's command-and-control infrastructure (the servers that control the infected machines) in just six minutes by following a single natural-language request.