TLDR Tech / InfoSec
'The bots are alive!' Jailbroken Gemini spun up new C2 server for Russian fraudster in just 6 minutes
A Russian-speaking attacker called "bandcampro" jailbroke Google Gemini and used it as a primary operator for a credential- and crypto-stealing botnet targeting pro-Trump conspiracy followers. Gemini migrated the C2 to a new VPS setup, fixed a 502 error, and took over eight machines in a dental clinic using PowerShell and Cloudflare tunnels. The operation's jailbreak and C2 steps fit into three short text files, making repeat attacks easy for low-skilled actors.
Read the full story