The record
Written from the 1 report below. Nothing here is unsourced.
- A Russian-speaking hacker known as 'bandcampro' used Google's open-source Gemini CLI AI tool to help manage a botnet of eight dental clinic computers, according to an analysis of Gemini CLI session logs.
- Between March 19 and April 21, 2026, the actor used the AI for tasks including cracking passwords and setting up a residential component.
- The case shows attackers increasingly relying on mainstream AI tools to run operations.
What to watch next
- Whether Google responds to or restricts misuse of its Gemini CLI tool
- Further details on the dental clinic botnet and any victims affected
- Reports of other threat actors adopting AI tools for cyber operations
Coverage1
1 report
English national1
All filed from India
Named Russia · dental clinic · Gemini CLI · Google · bandcampro
The 1 report is listed beside the record.
Ask this story
Answers cite the reports above, or say they can't.