Gemini CLI used as hacking agent by threat actor

A Russian-speaking threat actor named bandcampro used Google's open-source Gemini CLI AI tool to operate a botnet controlling eight systems in a dental clinic. The AI agent migrated the command-and-control infrastructure in six minutes, managed the botnet through natural-language requests, and proposed operational improvements at least 59 times. The botnet setup consisted of three plain-text files totaling roughly 5 KB.