Windows malware uses Grok AI to help stay hidden, researchers say

What happened: Researchers at Qrator Research Labs found Windows malware called x47.c that can reportedly use xAI's Grok to help choose ways to keep itself running on an infected PC. A threat actor named WraithTools has been advertising access to it. Key numbers: 18 advertised attack methods; 9 protection steps listed. Why it matters: Qrator based findings on the seller's advertisement, documentation, screenshots and messages, so the research shows what x47.c is advertised and designed to do, not how widely it is infecting PCs. xAI did not respond to a request for comment.

Researchers at Qrator Research Labs found Windows malware called x47.c that can reportedly use xAI's Grok to help choose ways to keep itself running on an infected PC. A threat actor named WraithTools has been advertising access to it.

Qrator based findings on the seller's advertisement, documentation, screenshots and messages, so the research shows what x47.c is advertised and designed to do, not how widely it is infecting PCs. xAI did not respond to a request for comment.