Back Cybersecuritynews

Hackers Can Leverage Grok and Copilot for Stealthy Malware Communication and Control

Cybersecuritynews •Guru Baran • February 19, 2026

A novel attack technique that repurposes mainstream AI assistants, specifically xAI’s Grok and Microsoft Copilot, as covert command-and-control (C2) relays, enabling attackers to tunnel malicious traffic through platforms that enterprise networks already trust and permit by default. Dubbed “AI as a C2 proxy,” the technique uncovered by Check Point Research (CPR) exploits the web-browsing and […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI Assistants Exploited as Covert Command-and-Control Channels AI assistants like Grok and Microsoft Copilot can be exploited to serve as covert command-and-control (C2) channels for cybercriminals. These platforms can be manipulated to fetch attacker-controlled URLs, allowing malicious traffic to blend into normal enterprise communications. This tactic enables threat actors to relay commands to infected machines and exfiltrate stolen data. 11 sources 26

Extracted Entities

Hackers Can Leverage Grok and Copilot for Stealthy Malware Communication and Control

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)