AI in the Middle Web-Based AI Services as C2 Relays

# AI in the Middle Web-Based AI Services as C2 Relays

https://gcdradar.vercel.app/incidents/ai-in-the-middle-web-based-ai-services-as-c2-relays · AIR-2026-0355 · closed 2026-07-14

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-06-30 (happened 2026-02-17)
- AI role: AI-enabled attack
- Products: Grok, Microsoft Copilot

## Summary

Researchers demonstrated an attack where malware uses unauthenticated public AI assistants as covert command-and-control relays. The technique leverages standard URL-fetch capabilities to exfiltrate data and receive attacker instructions.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-06-30: AI in the Middle: Turning Web-Based AI Services into C2 Proxies & The Future Of AI Driven Attacks (https://research.checkpoint.com/2026/ai-in-the-middle-turning-web-based-ai-services-into-c2-proxies-the-future-of-ai-driven-attacks)
- 2026-06-30: AI in the Middle: Web-Based AI Services as C2 Relays (https://atlas.mitre.org/studies/AML.CS0061)

## Sources

- 2026-06-30 MITRE ATLAS: AI in the Middle: Web-Based AI Services as C2 Relays https://atlas.mitre.org/studies/AML.CS0061
- 2026-06-30 research.checkpoint.com: AI in the Middle: Turning Web-Based AI Services into C2 Proxies & The Future Of AI Driven Attacks https://research.checkpoint.com/2026/ai-in-the-middle-turning-web-based-ai-services-into-c2-proxies-the-future-of-ai-driven-attacks

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.