NIK C2 — AI-Integrated Windows Command-and-Control Framework
الحالة
PASS
النتائج المتحققة
لا يوجد
التناقضات والقيود
UNKNOWN: Talos observed NIK C2 as a functional Go-based Windows C2/implant with credential theft, surveillance, remote-control/lateral movement, evasion, screen-locking ransomware and an integrated AI request path; active NIK C2 infrastructure was observed during research.
حد الدليل: Victim count, delivery chain, campaign prevalence, actor identity, MENA targeting or measured AI outcome advantage.
UNKNOWN: Public scanner/VirusTotal-derived records on 2026-10-30/31 showed total-sitevv.lol behind Cloudflare edges with multiple malicious/suspicious vendor verdicts, supporting malicious reputation and post-publication infrastructure drift.
حد الدليل: Original backend continuity, active NIK C2 sessions, victimization or actor identity.
UNKNOWN: GTIG/Mandiant observed multiple threat actors using agentic offensive frameworks in incident-response engagements, independently establishing broader live adversarial LLM/agentic framework use in 2026.
حد الدليل: NIK C2 deployment, victims, actor identity or NIK-specific AI efficacy.
UNKNOWN: MalwareBazaar lists representative SHA-256 0fb93dbb9525004f9e5b1ee4bcd6b6638700bee576413e955c8c96292fa964ee as NIKRAT with repository ingest on 2026-10-30; the same record embeds Kaspersky OpenTIP and ReversingLabs first-seen telemetry from 2026-08-12 plus malicious/suspicious verdicts, and some enrichment labels the family NIK C2.
حد الدليل: Victim infections, delivery chain, campaign scale, actor identity, or independence of every family label from later public reporting.
المتابعة المفتوحة
OPEN [HIGH]: VICTIM_SCALE_DELIVERY — Confirmed victim count/list, delivery or initial-access chain, prevalence denominator and campaign scale for NIK C2 remain missing; independent public sample telemetry is now recovered.
OPEN [HIGH]: ATTRIBUTION_INFRA_CONTINUITY — Actor attribution and direct continuity between Talos's observed NIK C2 backend and the current Cloudflare-fronted total-sitevv.lol state remain unresolved.