A new malware framework called NIK C2 is turning the OpenAI API into a tool for cybercriminals. Its Windows implant can dump passwords, record every keystroke, take hidden control of a desktop, and send the stolen data to an AI model for analysis, all inside the same session. The tool is a Go-based, 64-bit Windows remote access program. It talks... Weiterlesen: Hackers Weaponize OpenAI API in NIK C2 Framework for Credential Theft…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Weaponize OpenAI API in NIK C2 Framework for Credential Theft and Remote System Control
A new malware framework called NIK C2 is turning the OpenAI API into a tool for cybercriminals. Its Windows implant can dump passwords, record every keystroke,…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1071TA0011 · Command and Control
Application Layer Protocol (C2)
Mitigation: M1031 Network Intrusion Prevention & Egress Filtering
Quelle: Kontext-Klassifikation des Artikeltextes
Command and Control
Exfiltration
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
35 Quellen
CVE-2026-98432 Linux kernel IPv4 TCP flaw: status for CloudLinux
34 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2024-38625 | Linux Kernel up to 6.6.32/6.9.3 ntfs3 null pointer dereference (6c8054d59066/ff1068929459/1cd6c96219c4) VVulDB Updatesvor 3 Std.CVE-2024-38570 | Linux Kernel up to 6.6.32/6.8.11/6.9.2 gfs2 sd_dead_glocks use after free (Nessus ID 207818 / WID-SEC-2024-1418) VVulDB Updatesvor 3 Std.CVE-2024-36968 | Linux Kernel up to 6.6.31/6.8.10/6.9.1 Bluetooth l2cap_le_flowctl_init buffer overflow (Nessus ID 212722) VVulDB Updatesvor 3 Std.CVE-2024-36881 | Linux Kernel up to 6.6.30/6.8.9 userfaultfd close memory corruption (377f3a9a3d03/8d8b68a5b0c9/c88033efe9a3 / WID-SEC-2024-1259) VVulDB Updatesvor 3 Std.CVE-2024-27041 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 amdgpu_dm_fini null pointer dereference (WID-SEC-2024-1008) VVulDB Updatesvor 3 Std.CVE-2023-52653 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 SUNRPC gss_import_v2_context memory leak (Nessus ID 209785 / WID-SEC-2024-1008)
+28
9 Quellen
Binance suffers the largest crypto hack on record.
8 weitere Quellen
NNYT > Cybersecurityvor 2 Std.Binance Lost Over $6 Billion in Crypto Hack. Here’s What to Know. IIT Security Guruvor 4 Std.Binance’s $6.3bn heist: how one laptop opened the door to the biggest crypto theft in history CCybersecurity Divevor 4 Std.North Korea-linked group steals $6.3B from Binance in largest-ever cryptocurrency hack LLatest from ITProvor 2 Std.The Binance hack explained Iit-daily.netvor 2 Std.Wie sicher sind unsere Bitcoins nach dem Binance-Hack wirklich? SSlashdotvor 3 Std.Binance Suffers Biggest Crypto Hack In History With $6.3 Billion Affected [UPDATE]
+2
8 Quellen
CVE-2026-95274 | Google Chrome up to 153.0.8010.52 DevTools cross site scripting (WID-SEC-2026-3514)
7 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-95275 | Google Chrome up to 153.0.8010.52 MediaStream privileges management (WID-SEC-2026-3514) VVulDB Updatesvor 4 Std.CVE-2026-95277 | Google Chrome up to 153.0.8010.52 Views use after free (WID-SEC-2026-3514) VVulDB Updatesvor 4 Std.CVE-2026-95278 | Google Chrome up to 153.0.8010.52 WakeLock authorization (WID-SEC-2026-3514) VVulDB Updatesvor 4 Std.CVE-2026-95276 | Google Chrome up to 153.0.8010.52 Themes input validation (WID-SEC-2026-3514) VVulDB Updatesvor 4 Std.CVE-2026-95280 | Google Chrome up to 153.0.8010.52 V8 race condition (WID-SEC-2026-3514) VVulDB Updatesvor 4 Std.CVE-2026-95279 | Google Chrome up to 153.0.8010.52 Omnibox clickjacking (WID-SEC-2026-3514)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4309019/malware-trojaner-viren/hackers-weaponize-openai-api-in-nik-c2-framework-for-credential-theft-and-remote-system-control/