Cisco Talos has identified NIK C2, an active command-and-control framework that combines Windows malware with direct access to OpenAI’s API. The framework lets attackers steal credentials, monitor victims, and submit collected information for AI analysis without leaving the compromised session. Its Windows implant supports credential dumping, live... Weiterlesen: NIK C2 Malware Abuses OpenAI API to Analyze Stolen Data and Assist Ha…
Intelligence View
⚡ tsecurity.de Intelligence
NIK C2 Malware Abuses OpenAI API to Analyze Stolen Data and Assist Hackers During Attacks
Cisco Talos has identified NIK C2, an active command-and-control framework that combines Windows malware with direct access to OpenAI’s API. The framework lets …
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1071TA0011 · Command and Control
Application Layer Protocol (C2)
Mitigation: M1031 Network Intrusion Prevention & Egress Filtering
Quelle: Kontext-Klassifikation des Artikeltextes
Command and Control
Exfiltration
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Powiązany klaster opowieści i źródła (wektor AI)
12 źródeł
CVE-2026-106207 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
11 kolejnych źródeł
VVulDB Updatesvor 5 Std.CVE-2026-106209 | Google Chrome up to 154.0.8037.97 Mobile clickjacking (WID-SEC-2026-3761) VVulDB Updatesvor 5 Std.CVE-2026-106210 | Google Chrome up to 154.0.8037.97 Scroll information disclosure (WID-SEC-2026-3761) VVulDB Updatesvor 5 Std.CVE-2026-106213 | Google Chrome up to 154.0.8037.97 WebAudio race condition (WID-SEC-2026-3761) VVulDB Updatesvor 5 Std.CVE-2026-106211 | Google Chrome up to 154.0.8037.97 TabStrip use after free (WID-SEC-2026-3761) VVulDB Updatesvor 5 Std.CVE-2026-106214 | Google Chrome up to 154.0.8037.97 Proxy information disclosure (WID-SEC-2026-3761) VVulDB Updatesvor 5 Std.CVE-2026-106215 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
+5
9 źródeł
CVE-2026-92162 | Flatpak up to 1.18.0 flatpak-system-helper privileges management (Nessus ID 374780)
8 kolejnych źródeł
VVulDB Updatesvor 2 Std.CVE-2026-96281 | Red Hat Enterprise Linux System Helper RemoveLocalRef privileges management (EUVD-2026-88027 / Nessus ID 374780) VVulDB Updatesvor 2 Std.CVE-2026-66069 | RabbitMQ up to 4.1.12/4.2.6/4.2.x Management Plugin rabbit_mgmt_wm_reset.erl is_authorized privileges management (WID-SEC-2026-2268) VVulDB Updatesvor 2 Std.CVE-2026-66067 | VMware RabbitMQ up to 4.2.6/4.3.0 Stream Open privileges management VVulDB Updatesvor 4 Std.CVE-2026-65959 | vitessio Vitess up to 24.0.2 Debug Endpoint vrlog.go vrlogStatsHandler privileges management VVulDB Updatesvor 4 Std.CVE-2026-81627 | Red Hat Enterprise Linux VAPIC hw/i386/vapic.c privileges management (EUVD-2026-82872) VVulDB Updatesvor 4 Std.CVE-2026-69399 | Microsoft Azure Arc privileges management
+2
7 źródeł
CVE-2026-72329 | Linux Kernel up to 7.1.4/7.2-rc2 liquidio liquidio_vf.c pcie_flr null pointer dereference
6 kolejnych źródeł
VVulDB Updatesvor 3 Std.CVE-2026-72395 | Linux Kernel up to 7.2-rc1 Hwmon Pmbus regulator_handle_critical event state issue VVulDB Updatesvor 3 Std.CVE-2026-72380 | Linux Kernel up to 7.1.4/7.2-rc1 xen/pvcalls class.c pvcalls_front_event_handler req_id out-of-bounds write VVulDB Updatesvor 3 Std.CVE-2026-72338 | Linux Kernel up to 7.2-rc2 act_pedit net/sched/act_pedit.c tcf_pedit_offload_act_setup tcfp_nkeys toctou VVulDB Updatesvor 3 Std.CVE-2026-72254 | Linux Kernel up to 7.2-rc1 netfilter nft_fib_validate null pointer dereference LLinux, GNU/Linux, free soft…vor 6 Std.The Linux 7.4 Merge Window Is Easily The Largest In Kernel History IIT Security Newsvor 5 Std.Critical Linux Kernel Vulnerability Could Allow Hackers to Gain Remote Root Access
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4308229/tkanka/nik-c2-malware-abuses-openai-api-to-analyze-stolen-data-and-assist-hackers-during-attacks/