Recent reports warn that AI assistants like Microsoft Copilot and Grok, which can browse the internet and access URLs, are being exploited by hackers as hidden communication channels. Instead of connecting directly to malicious servers, cybercriminals use these trusted AI tools to send commands and steal data, making their activities harder to detect. Attackers create simple programs that leverage the AI’s browsing features to hide malicious traffic within normal web activity, bypassing traditional security defenses. At the same time, a dangerous Android malware called Keenadu has been discovered, capable of taking full control of infected devices by embedding itself deep into firmware, often during manufacturing or through malicious updates. Keenadu can steal sensitive information and monitor user activity, and it’s spread through fake apps and infected firmware, with some devices in countries like Russia, Japan, and Brazil affected. Experts recommend replacing infected devices or flashing trusted firmware, and Google is actively removing malicious apps from the Play Store. CTIX analysts will continue to report on the latest malware strains and attack methodologies.
- BleepingComputer: AI Platforms Can Be Abused for Stealthy Malware Communication article
- TheHackerNews: Researchers Show Copilot and Grok Can Be Abused as Malware C2 Proxies article
- BleepingComputer: New Keenadu Backdoor Found in Android Firmware, Google Play Apps article
- SecurityWeek: Malware & Threats New Keenadu Android Malware Found on Thousands of Devices article