Windows botnet x47.c offers AI API draining among 18 attack methods

Qrator Research Labs found a previously undocumented Windows botnet, x47.c, whose seller WraithTools advertises 18 attack methods, including an "AI API drain" that sends repeated billable requests with a valid OpenAI or xAI key to exhaust a victim's credits. Packages are priced from $200 to $950.

• 18 methods include HTTP, TCP and UDP floods, TLS stress and amplification
• AI API drain burns OpenAI and xAI credits without touching the victim's site
• AI Stealth module uses xAI's Grok to pick persistence actions
• Botnet packages are priced from $200 to $950