Hackers Weaponize Grok and Copilot for Stealth Malware C2 Channels
VPN Central [Unofficial]
February 23, 2026
Attackers now tunnel malware command-and-control through trusted AI platforms. Check Point Research demonstrated Grok and Microsoft Copilot as covert C2 proxies. Web-browsing capabilities fetch attacker URLs while blending with normal corporate traffic. The technique named “AI as a C2 proxy” requires no API keys or accounts. Malware embeds recon data in URL query parameters to […]
The post Hackers Weaponize Grok and Copilot for Stealth Malware C2 Channels appeared first on VPN Central.
Discussion in the ATmosphere