Skip to content
Auto-CTI
Back to all deep dives
CISCO TALOS BLOG

NIK C2: The new AI-enabled command-and-control framework

HIGH AI-enabled C2 Windows implant credential dumping HVNC
NIK C2: The new AI-enabled command-and-control framework

Strategic summary

NIK C2 shows attackers integrating generative AI directly into the C2 channel to automatically analyze harvested data and lower operational costs.

Relevance for you

NIK C2 shows attackers integrating generative AI directly into the C2 channel to automatically analyze harvested data and lower operational costs.

Risk score

Review required 12
cvss base
0.00
kev bonus
0.00
epss bonus
0.00
poc bonus
15.00
raw before weight
15.00
industry weight
1.21
freshness factor
0.50
exploitability factor
1.00
days old
7.00
vendor mismatch penalty
0.00
consensus penalty
-8.00

Path: operational

Consensus check

The pipeline self-checks before delivery. These rules lowered the score:

  • VENDOR_MISMATCH Vendor not found in alert title −5
  • TTP_SKIPPED TTP mapping skipped (placeholder or aggregation article) −3
Consensus penalty:
−8.0
Total penalty:
−8.0
ESC

…