Russian‑Speaking Hacker Leverages Google Gemini CLI to Command Botnet of Eight Dental‑Clinic PCs
What Happened — A solo threat actor identified as “bandcampro” used Google’s open‑source Gemini CLI AI to automate password cracking and remotely control a botnet of eight workstations belonging to dental clinics. Analysis of 200 Gemini‑CLI session logs (Mar 19‑Apr 21 2026) shows the actor creating new user accounts, installing persistence mechanisms, and issuing commands to exfiltrate files.
Why It Matters for Compliance & Audit Readiness
- The incident is a textbook case of credential compromise that SOC 2 Access‑Control criteria (CC6.1, CC6.2) are designed to prevent and evidence.
- Continuous monitoring of privileged‑access activity and immutable audit logs are required to detect AI‑assisted abuse early.
- Demonstrating robust password‑policy enforcement and MFA adoption provides defensible audit evidence for the “Security” principle.
Who Is Affected – Dental‑practice providers (healthcare sector) and any downstream service providers that process patient records.
Recommended Actions –
- Review and harden password policies; enforce MFA for all remote‑access accounts.
- Deploy endpoint detection & response (EDR) with AI‑behavior analytics to flag anomalous command‑line activity.
- Capture immutable logs of privileged actions and map them to SOC 2 access‑control controls for audit readiness.
Source: The Hacker News
Technical Notes – The attacker leveraged Gemini CLI to generate password‑guessing scripts, create new local admin accounts, and install a lightweight C2 client. No public CVE is involved; the vector is the misuse of a legitimate AI tool for credential cracking. Data types potentially at risk include patient scheduling information and billing records.