NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries

Security researchers at Cisco Talos have uncovered a new Windows malware framework that can use its victims' own OpenAI credentials to run artificial intelligence queries. The software, known as NIK C2, sends stolen data directly to OpenAI from infected computers to analyse it within compromised sessions. If attackers do not provide their own access key, the program automatically searches the target machine for one and uses it instead. Talos warned this leaves victims paying for the attackers' AI use while hiding who made the requests. Beyond its AI features, the tool supports over 52 commands for remote surveillance, credential theft, keylogging and evading defences.