New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining

A new Windows botnet called x47.c uses AI to stay hidden on infected computers and offers multiple attack capabilities including DDoS (distributed denial-of-service, overwhelming a target with traffic), credential theft, and an 'AI drain' method that consumes victims' paid API credits by sending requests directly to AI services like OpenAI and xAI Grok. The botnet is sold by a threat actor named WraithTools with packages ranging from $200 to $950, and includes a control panel that lets operators manage infected machines, choose attack methods, and maintain persistence using AI to decide which hiding techniques to use.