AI agent incident
The x47.c Windows botnet used xAI's Grok API to choose persistence actions and drain AI credits
What happened
SecurityWeek reported a new Windows botnet, x47.c, that calls xAI's Grok API to choose its persistence actions and drains AI API credits in the process.
Why it matters
Two things in one binary: a model making the malware's decisions, and AI API credits as the loot. That makes an API spend alert a malware detection, and puts it on the security team's dashboard rather than only on finance's.