← Back to Feed

Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet

July 14, 2026 · Trend Micro · Severity: MEDIUM

TrendAI Research analyzed over 200 Gemini CLI session logs showing a Russian-speaking threat actor using AI to run a live botnet. The actor completed a full C&C migration in six minutes while doing only 11% of the work himself.

Key Takeaways

  • Russian-speaking actor used AI to run a live botnet.
  • Full C&C migration completed in just six minutes.
  • Actor performed only 11% of the work himself.
☕ Buy a Coffee