New NIK C2 Malware Can Run Up AI Bills on Your Stolen OpenAI Key

Cisco Talos has observed a new command-and-control framework, named NIK C2, being used in the wild, according to research published on October 29. Its Go-based implant gives attackers remote access, credential theft, keylogging and surveillance. It also includes a built-in OpenAI client, so attackers can send stolen data for AI analysis from inside the compromised session. Operators supply a prompt and model choice through the control panel, and the infected machine sends the request and returns the answer.

The most unusual feature is how it handles API keys. If the operator does not supply one, the malware reads an OPENAI_API_KEY environment variable on the infected machine, which Talos described as a deliberate design. A business with an OpenAI key configured on a compromised Windows system could end up paying for the attacker's requests. Talos said OpenAI would bill the victim's payment method, and access logs would show the victim's key as the source, leaving no trace pointing to the attacker.

The malware supports more than 52 commands, including theft of credentials, browser data, cryptocurrency wallets and Wi-Fi details, plus screen capture, lateral movement and defence evasion. It also has a screen-locking ransomware module that demands Bitcoin or USDT without encrypting files, which leaves fewer forensic traces and is faster to deploy. Talos found at least three versions and active infrastructure, and assessed with moderate confidence that NIK C2 is fully functional rather than a proof of concept.