Thailand's computer emergency response team has published an advisory on x47.c, a Windows botnet advertised with capabilities including DDoS, credential theft, SOCKS5 proxying, and two AI-flavored tricks. The malware's AI Stealth module uses xAI's Grok to assess an infected machine and select a persistence method — startup entries, scheduled tasks, and fallbacks if AI services can't be reached.

More novel is the advertised 'AI API Drain' feature: with a valid API key belonging to the target, attackers can select a model and fire off huge volumes of requests against OpenAI, xAI, or compatible APIs, directly consuming credits or racking up charges on the victim's account. The botnet also steals AI-service tokens alongside browser passwords, Discord tokens, and crypto wallet data.

ThaiCERT cautions that many capabilities are based on the seller's documentation and claims, not fully verified in real-world attacks. But it marks one of the first public CERT advisories documenting AI models being woven into both malware persistence logic and a new monetization attack against AI API billing.