Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
Summary
A Russian-speaking hacker named 'bandcampro' used Google's Gemini CLI (a command-line tool powered by AI) to control a botnet (a network of compromised computers) targeting eight computers in a dental clinic, automating tasks like password cracking, setting up infrastructure, and managing the infected machines. The AI acted as the hacker's primary assistant, even proactively suggesting improvements and debugging connection problems without being asked. This setup is particularly dangerous because the entire operation fits into just three small files, making it easy to replicate and move to a new server if taken down.
Classification
Affected Vendors
Related Issues
CVE-2024-27444: langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-
CVE-2026-30308: In its design for automatic terminal command execution, HAI Build Code Generator offers two options: Execute safe comman
Original source: https://thehackernews.com/2026/07/russian-speaking-hacker-uses-google.html
First tracked: July 20, 2026 at 08:00 AM
Classified by LLM (prompt v3) · confidence: 92%