AI Assistants Exploited as Covert Command-and-Control Channels

AI Assistants Exploited as Covert Command-and-Control Channels

First seen 18 Feb 2026, 15:24 UTC •Research.CheckpointTechjuice.PkCybernewsInfosecurity-MagazineBleepingcomputer+5 •77% similarity •26.3

Article Content

Browse articles
ThreatCluster

AI assistants like Grok and Microsoft Copilot can be exploited to serve as covert command-and-control (C2) channels for cybercriminals. These platforms can be manipulated to fetch attacker-controlled URLs, allowing malicious traffic to blend into normal enterprise communications. This tactic enables threat actors to relay commands to infected machines and exfiltrate stolen data.

ThreatCluster AI

Timeline

2026-02-17
Research published on AI services being used as C2 proxies
2026-02-18
Infosecurity article reports on AI assistants' exploitation

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

VoidLink Microsoft Copilot WebView Windows Windows 11 Copilot Data Breach Malware Phishing Prompt Injection Dropbox Gmail Grok Notion PowerShell WebView2