Hackers Weaponize OpenAI API in NIK C2 Framework for System Control

Executive Summary On 29 October 2026, Cisco Talos Intelligence identified NIK C2, a Go-based Windows command-and-control framework that combines credential theft, surveillance, remote access, lateral movement, defense evasion, and screen-locking ransomware capabilities within a single implant, which can utilize OpenAI capabilities. The malware integrates the OpenAI Chat Completions API through an ai_generate command, allowing operators…

Read More