Misbehavior1 sourceFirst seen
Agent Commander: Your Chatbot Joins the Botnet Without Asking Anyone
Ourtake
Turns out the new malware doesn't need a payload. It just needs a polite email and an agent that reads it.
What happened
Security researcher Johann Rehberger published a proof of concept called Agent Commander, a command and control server that uses indirect prompt injection to hijack AI agents and assign them natural-language tasks. He demonstrated the attack on OpenClaw, Kimi Claw and NanoClaw, using a heartbeat file and scheduled tasks for persistence. The post is framed as educational research and the tool has not been published.