"Beyond the AI-control surface, the host also preserved the operator’s alerting and command chann...

Summary

Security researchers discovered that the Bissa scanner malware maintained command and control capabilities through a hardcoded Telegram bot token (bissapwned_bot, ID 8798206332) embedded in its runner scripts. The malware preserved both the AI-control surface and the operator's alerting and command channel, enabling remote operator control via Telegram messaging.

Indicators of Compromise

• malware — Bissa scanner
• url — https://t.co/nNSRU8prqZ

Entities