September 27, 2026
- x47.c, a new Windows botnet, calls xAI Grok to pick its own persistence actions from a predefined list (startup entries, scheduled tasks), with local fallback when the model call fails. WraithTools sells the base package at $200, DDoS add-on $150, full package $950. Its DDoS tab carries 18 methods including an "AI API drain" that burns a victim's paid OpenAI/xAI credits by hitting the provider directly with a stolen key, so the victim's site stays up while the account behind its AI features runs dry (SecurityWeek). · Threat Activity
in Citrix NetScaler Zero-Days Land Mid-Weekend, No Patch Until Next Week