aiqbench analysis
This threat vector represents a specific financial attack on AI infrastructure where malware directly consumes paid API credits rather than just stealing credentials or disrupting web services. The capability to automate high-volume requests against providers like OpenAI and xAI creates a unique "denial of wallet" risk that bypasses traditional traffic filtering methods. While the tool is currently marketed by threat actors, its existence highlights emerging risks in AI billing systems that require new defensive strategies beyond standard botnet mitigation.
Hackers Built a Botnet That Doesn’t Just Steal Data, It Burns AI Credits
A Windows botnet called x47.c can spend victims’ paid AI credits, steal data, and flood websites. Its operator markets it as an attack toolkit for remote use, but the evidence describes advertised capabilities, not confirmed widespread infections or documented victims. The botnet gives operators control of infected Windows machines and can collect browser passwords, cookies, […] The post Hackers Built a Botnet That Doesn’t Just Steal Data, It Burns AI Credits appeared first on Cyber Security News.
A Windows botnet called x47.c can spend victims’ paid AI credits, steal data, and flood websites. Its operator markets it as an attack toolkit for remote use, but the evidence describes advertised capabilities, not confirmed widespread infections or documented victims. The botnet gives operators control of infected Windows machines and can collect browser passwords, cookies, and Discord tokens. Researchers have not established how it first infects those machines. Its advertised attacks threaten online services and paid AI accounts. Analysts…
Excerpt shown under the publisher's RSS terms · 79 words · full text and figures are on the publisher's site
