Windows malware uses Grok AI to help stay hidden, researchers say
A new piece of Windows malware is giving cybercriminals a lot of ways to cause trouble from one infected PC. It can steal passwords, grab browser cookies, route internet traffic through your computer and even burn through paid AI credits. Then there is the part that caught my attention. The malware, called x47.c, can reportedly use xAI’s Grok to help decide how to keep itself running on an infected Windows computer.
Security researchers at Qrator Research Labs uncovered x47.c while tracking cybercrime activity. A threat actor using the name WraithTools has been advertising access to the malware, which comes with tools for stealing credentials and launching attacks. Qrator based its findings on the seller’s advertisement, technical documentation, screenshots and follow-up messages, so the research shows what x47.c is advertised and designed to do rather than how widely it is currently infecting Windows PCs. Here’s how it works, what the AI connection really means and the steps you can take to protect your Windows PC and accounts.
AI IS NOW POWERING CYBERATTACKS, MICROSOFT WARNS
Missed CyberGuy LIVE? Watch the replay and discover 5 ways AI can help you get better health care.
Our free CyberGuy LIVE class Get Better Healthcare with AI has ended, but you can still watch the full replay. Kurt “CyberGuy” Knutsson walks you through five practical ways AI can help you prepare for appointments, remember important details, understand complicated medical information, research prescription questions and organize your next steps. No technical experience is needed.
Plus, recordings of all our past classes are available, including How to Stop Spam, Phone Security and Financial Protection, each with a free downloadable checklist.
Watch the free replays and get your checklists at CyberGuyLive.com
Once x47.c infects a Windows computer, the attacker can remotely control it through a management panel. Think of that infected PC as one computer in a larger network of machines controlled by the same criminal. Security researchers call that a botnet, but the important part for you is much simpler: someone else can potentially use your computer without your permission.
The operator can tell infected machines to launch online attacks. They can also steal information from those computers or use the victim’s internet connection to route other traffic. Qrator found 18 advertised attack methods built into x47.c. Some can overwhelm websites and online services with traffic. Another targets something far newer: paid AI accounts.
Many developers and businesses pay OpenAI, xAI and other AI companies based on how much they use their services. Access to those services often relies on a secret API key. You can think of that key as a password that lets an app communicate with an AI service and charge usage to an account.
If an attacker gets a valid API key, x47.c includes a feature that can repeatedly send requests to the AI provider. Those requests can use up prepaid credits or increase the victim’s bill. Qrator describes this as a “Denial of Wallet” attack. The victim’s website could keep working normally while the AI account behind part of it quietly chews through its available balance.
There is an important limit here. The attacker already needs a valid API key. x47.c does not magically break into an OpenAI or xAI account and create one. Still, that can become expensive quickly if an account allows automatic top-ups or high spending limits.
The Grok connection sounds complicated, but the basic idea is pretty straightforward. Malware often tries to make sure it starts again after you reboot your computer. Security researchers call that persistence. x47.c includes what its seller calls an “AI Stealth” feature. According to Qrator, it can use Grok to look at the state of the infected computer and select from a predefined list of ways to maintain that access.
Those options include adding programs that run when Windows starts and creating scheduled tasks that can launch automatically. Grok does not appear to freely invent new attacks or control everything the malware does. Instead, it helps choose among options that the malware already has. The malware can also fall back on its own built-in methods if the AI request fails. So, cutting off its access to Grok would not necessarily remove the infection. We reached out to xAI for comment on the reported use of Grok and the safeguards it has in place to detect this kind of activity but did not hear back before our deadline.
For most Windows users, this may be the most important part. x47.c advertises the ability to steal passwords saved in your browser. It can also collect browser cookies, Discord tokens, cryptocurrency wallet information and tokens tied to AI websites.
Browser cookies deserve special attention because some of them keep you signed in to websites. If malware steals an active login session, an attacker may be able to access an account without typing your password again. In some cases, changing the password alone may not immediately end a stolen session. That is why anyone dealing with an infected PC should also review active sessions and sign out of devices they do not recognize.
AI MALWARE CAN REWRITE ITSELF TO EVADE DETECTION
x47.c includes another feature called a SOCKS5 proxy. In plain English, that means a criminal can potentially route internet traffic through the infected computer. Online activity generated by the attacker could then appear to come from the victim’s internet connection.
The malware’s control panel lets operators see which infected computers are available to relay that traffic and whether those connections are still working. Meanwhile, the attacker can continue using the same infected machine to steal information or take part in online attacks.
You do not need to understand every technical feature inside x47.c to protect yourself. These steps can reduce your chances of getting infected and limit the damage if malware does reach your computer.
Install Windows security updates promptly. Updates fix security weaknesses that attackers can use against PCs, even though Qrator has not identified a specific Windows vulnerability or infection method tied to x47.c. Go to Settings > Windows Update > Check for updates and install anything available.
Also remember that legitimate Windows updates come through Windows itself. A website that suddenly tells you to download a Windows update should make you suspicious. CyberGuy has previously covered fake Windows update pages that actually install malware.
Keep strong antivirus or security software running and updated. Security tools can help catch malicious downloads and suspicious behavior before malware becomes deeply established on your computer. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.
Avoid software from unfamiliar download sites, unexpected email links or pop-ups telling you that something needs an urgent update. Also be especially cautious if a webpage tells you to open Windows Run, PowerShell or Command Prompt and paste something into it. Cybercriminals increasingly use that trick to persuade people to install malware themselves. We recently covered thousands of hacked websites using fake verification prompts to push malicious Windows commands.
If malware steals one password, password reuse can turn one compromised account into several. Use a strong, unique password for every important account. A password manager can help create and store them.
Enable two-factor authentication (2FA) wherever possible. It gives attackers another obstacle if they obtain your password. However, remember that malware capable of stealing active browser sessions creates another risk, so 2FA should be one layer of your protection rather than your only one.
HALLUSQUATTING AI ATTACK COULD HIJACK YOUR COMPUTER
If you believe your PC has been infected, changing passwords should not be your only account step. From a separate trusted device, review active login sessions for your email, financial accounts, social accounts and other important services. Sign out of unfamiliar sessions or use the service’s option to sign out everywhere. Also revoke authentication tokens or connected apps you no longer recognize. Qrator specifically warns that removing the malware does not undo credentials or tokens that attackers may have already stolen.
This one mainly applies to developers, businesses and anyone paying for AI through an API. Treat an API key like a password. Never publish it in a public code repository or leave it sitting in a document that other people can access. Review AI account usage and billing for requests you do not recognize. If you think a key has leaked, revoke it and create a new one. Also use spending limits, billing alerts and controls on automatic top-ups when your AI provider offers them. Those safeguards can limit how much an attacker could spend with a stolen key.
If your computer suddenly behaves strangely or you discover malware, disconnect it from the internet. Then open your trusted security software directly and run a full scan. Do not call phone numbers in pop-ups or follow instructions from unexpected warnings on your screen. Our CyberGuy guide on what to do if your computer has been hacked walks through the next steps.
If malware may have stolen information from your browser, use another clean device to change the passwords for your most important accounts. Start with your primary email account because password-reset messages for other services often go there. Then move to financial accounts and other sensitive services. After changing each password, review account activity and recovery information for anything you do not recognize.
What gets my attention here isn’t simply that the malware has the word AI attached to it. We’ve seen plenty of cyberthreats use AI as part of the sales pitch. What feels different with x47.c is how many jobs the attacker can handle from the same infected Windows PC. The malware can steal passwords and browser sessions, turn the computer into a traffic relay and help launch attacks. Then Grok can assist with choosing how the malware tries to keep its foothold on that machine. Still, the most useful lesson for you comes back to the security basics. Keep Windows updated, protect your accounts and be careful about what gets installed on your PC. And if you ever discover an infection, remember that cleaning the computer is only part of the job. You also have to assume passwords, browser sessions or other account access may already be in someone else’s hands.
Should AI companies be responsible for detecting when their tools are being used in malware and alerting authorities about that kind of activity? Let us know by writing to us at CyberGuy.com.
Sign up for my FREE CyberGuy Report
Copyright 2026 CyberGuy.com. All rights reserved.
Leave a Reply