Home / Technology / New malware burns AI credits & steals passwords
New malware burns AI credits & steals passwords
6 Oct
Summary
- x47.c malware uses AI to maintain persistence on infected PCs.
- It can steal passwords, browser cookies, and cryptocurrency wallets.
- The malware can perform 'Denial of Wallet' attacks on AI accounts.
A new malware variant, dubbed x47.c, poses a significant threat by offering cybercriminals multiple avenues for illicit gains from a single infected PC.
Discovered by security researchers, this malware can steal sensitive passwords, capture browser cookies, and hijack internet traffic. Its unique feature involves using AI, specifically xAI's Grok, to aid in maintaining persistence on infected Windows machines, ensuring its continued operation after reboots.
Attackers can leverage x47.c to launch distributed denial-of-service attacks or conduct 'Denial of Wallet' attacks, draining paid AI credits by repeatedly making requests via stolen API keys. This allows criminals to deplete an account's balance without the victim necessarily noticing immediate service disruption.
Beyond financial theft, x47.c targets user credentials, browser sessions, cryptocurrency wallet information, and tokens associated with AI services. It functions as a SOCKS5 proxy, allowing attackers to route their internet traffic through compromised computers, masking their online activities.
Protection involves keeping Windows updated, using robust security software, and exercising caution with downloads. Strong, unique passwords and two-factor authentication are crucial. If an infection is suspected, disconnecting from the internet and changing sensitive passwords from a separate, trusted device are recommended steps.
