Security researchers at Qrator Research Labs identified a new Windows malware named x47.c that reportedly leverages xAI's Grok to maintain persistence on infected systems. The threat actor, operating under the alias WraithTools, advertises access to the malware alongside tools for credential theft and attack launches. Qrator's analysis is based on the seller's advertisement, technical documentation, screenshots, and follow-up messages, indicating what x47.c is designed to do rather than confirming widespread current infection rates.
Once installed, x47.c allows remote control of the victim's computer through a management panel, effectively turning the machine into a node within a botnet. Qrator identified 18 advertised attack methods built into the software. These include capabilities to overwhelm websites with traffic and a specific feature targeting paid AI accounts. By using stolen API keys, the malware can send repeated requests to AI providers like OpenAI or xAI, exhausting prepaid credits or inflating bills. Qrator labels this a "Denial of Wallet" attack, noting that the victim's website may function normally while their AI account balance depletes.
The malware's "AI Stealth" feature distinguishes x47.c by using Grok to assess the state of the infected computer. According to Qrator, Grok selects from a predefined list of persistence mechanisms, such as adding startup programs or creating scheduled tasks. The AI does not invent new attacks or control all malware functions; it assists in choosing among existing options. If the AI request fails, x47.c falls back on built-in methods, meaning blocking Grok access does not necessarily remove the infection.
Beyond persistence and financial drain, x47.c is advertised to steal passwords, browser cookies, Discord tokens, and cryptocurrency wallet information. Browser cookies are particularly critical because they can maintain active login sessions, potentially allowing attackers to access accounts without re-entering passwords. The malware also includes a SOCKS5 proxy feature, enabling operators to route internet traffic through infected machines so that online activity appears to originate from the victim's connection.
Qrator recommends that users install Windows security updates promptly and keep antivirus software current. Since the malware can steal active sessions, changing passwords alone may not end an intrusion; users should review active login sessions and sign out of unrecognized devices from a trusted device. For developers and businesses using AI APIs, treating API keys as passwords is essential. Users should review billing for unrecognized requests, revoke leaked keys, and enable spending limits or billing alerts. If an infection is suspected, disconnecting the machine from the internet and running a full scan is advised before assuming compromised credentials are safe.