AI Agent as a C&C Operator: How Gemini CLI Helped Run a Botnet in a Dental Clinic

Colleagues, I’d like to flag a cybersecurity and AI case worth noting.

Trend Micro researchers reported that a Russian-speaking threat actor used Google Gemini CLI not only for guidance, but for hands-on control of infrastructure.

The AI helped migrate a C&C server, configure tunnels, fix errors, and manage a botnet of eight PCs in a dental clinic.

It was also used for password guessing, reconnaissance, and fraud preparation.

Most concerning: the setup can be moved to a new VPS via just a few text files.

Why it matters: AI lowers the barrier to attack and makes infrastructure more disposable.

In your view, how should AI agents be restricted in corporate environments?

#cybersecurity #AI #botnet #cybercrime