A Russian-speaking hacker has taken the unusual step of using Google’s open-source Gemini CLI AI to control a botnet of eight dental clinic PCs.
**A Botnet Born of Convenience**
An in-depth analysis by security researchers has uncovered the tactics used by the solo threat actor, known as “bandcampro,” who has been linked to a botnet consisting of compromised PCs at dental clinics across a range of countries.
According to the analysis, which drew on 200 sessions logs from the Google Gemini CLI, bandcampro appears to have employed the AI-powered tool to streamline and outsource a portion of their operations.
The researchers discovered that bandcampro utilised the Gemini CLI’s ability to automate tasks to control their botnet, leveraging the AI’s capabilities to issue commands and orchestrate the compromised PCs.
What We Know About Google Gemini CLI
First released in **2022**, Gemini CLI is an open-source AI tool developed by Google that enables users to generate and manage cloud-based infrastructure through a simple command-line interface.
While designed for legitimate purposes, researchers have highlighted the potential risks associated with the AI-powered tool, particularly when used by malicious actors.
The fact that bandcampro was able to harness the Gemini CLI’s capabilities to control a live botnet raises questions about the potential for AI-powered tools to be exploited for nefarious purposes.
A Warning for AI Developers and Users
The incident serves as a stark reminder of the importance of security and responsible AI development.
As more developers turn to AI-powered tools like Gemini CLI, it’s essential to consider the potential risks and safeguards that must be put in place to prevent the misuse of these technologies.
**What this means**: The incident highlights the need for greater awareness and security measures surrounding AI-powered tools to prevent their exploitation by malicious actors.
