NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
A data breach has been confirmed at Malware, with the scope still being worked out.

A data breach has been confirmed at Malware, with the scope still being worked out.
Anyone whose data Malware held is potentially affected, specifically account holders whose records were exposed.
Stolen credentials travel -- attackers routinely test them against unrelated services, which is why the exposure doesn't stop at the breached system's own doors.
If you have any relationship with Malware, watch for phishing attempts that reference this breach specifically -- stolen data often gets reused this way.
Any reused password from this account is worth changing immediately, especially on other services where the same password might still be active.
Any unsolicited message referencing this breach is worth treating with suspicion, since attackers commonly impersonate the breached company afterward.
What happened
A data breach has been confirmed at Malware, with the scope still being worked out.
Who is affected
Anyone whose data Malware held is potentially affected, specifically account holders whose records were exposed.
Why it matters
Stolen credentials travel -- attackers routinely test them against unrelated services, which is why the exposure doesn't stop at the breached system's own doors.
What security teams should do
If you have any relationship with Malware, watch for phishing attempts that reference this breach specifically -- stolen data often gets reused this way.
Any reused password from this account is worth changing immediately, especially on other services where the same password might still be active.
Any unsolicited message referencing this breach is worth treating with suspicion, since attackers commonly impersonate the breached company afterward.