NIK C2 Malware Can Use Victims’ OpenAI API Keys for AI Queries

Cisco Talos observed the AI-enabled NIK C2 malware framework in the wild. The malware can use an OPENAI_API_KEY environment variable on an infected Windows system, potentially charging the victim’s payment method for AI requests.