FORGOTTEN HISTORY: Russian hacker turns gemini cli into a hacking agent creates small scale botnet - Caught on Camera

• Russian hacker “bandcampro” used Google’s Gemini CLI to control an eight‑device botnet at a dental clinic
• The attacker tricked the AI by posing as a pen tester, directing it to migrate C2 infrastructure, troubleshoot connectivity, and prepare payload bundles
• The AI assisted with daily operations like password guessing and WordPress access, highlighting risks of misuse when threat actors co‑opt AI tools

A Russian hacker and his AI companion were able to successfully control a miniature, eight-system botnet, with the hacker giving instructions in conversational language, and the AI doing his bidding, experts have found.