MediumNewsLLM-specific
New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining
- Published
- Record updated
Summary
A threat actor named WraithTools sells access to a new Windows botnet called x47.c, advertised with DDoS, credential theft, SOCKS5 proxy and AI API drain capabilities, priced from $200 to $950. Its AI stealth module reportedly uses xAI Grok to choose persistence actions, and its AI drain mode uses an operator-supplied API key to consume a victim's paid AI credits on providers such as OpenAI and xAI.
Related items
- MediumGHSA-68g8-gh8f-7rhg: pgEdge RAG Server discloses part of the configured provider credential through API error messagesSame vendor · GitHub Advisory Database
- InfoHow Amplitude ships product improvements in 1–2 days with OpenAISame vendor · OpenAI Blog
- InfoEndor Labs + OpenAI: Strengthening the Defense Factory With Accelerated Remediation | Endor LabsSame vendor · Endor Labs Blog
- InfoJensen Huang built an AI kingdom. Now he’s gone, will Nvidia’s ramparts be breached?Same vendor · The Guardian Technology
- LowAI chatbots are recommending fake retail websites, study findsSame vendor · The Verge (AI)