Cybersecurity researchers have revealed that AI assistants with web browsing capabilities, such as Microsoft Copilot and xAI Grok, can be exploited as command-and-control (C2) proxies for malware. This technique allows attackers to use these legitimate tools as stealthy relays, blending malicious communications into normal enterprise traffic to evade detection.

The attack method demonstrates how AI systems designed for productivity can be repurposed for malicious ends, highlighting a new vector for cyber threats. By leveraging the URL fetching features of these assistants, attackers can establish covert channels that are harder to identify, posing significant risks to organizational security.

Key Takeaways

  • AI assistants with web browsing can be abused as C2 proxies for malware
  • Attackers can use this to blend into legitimate communications and evade detection
  • Microsoft Copilot and xAI Grok have been demonstrated as vulnerable to this technique
  • This represents a new cybersecurity threat vector involving AI tools

Source: The Hacker News