[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyT6pcatO2rWOFZ10GyxsGpo6fpkdeLC_njPd7kbCJeo":3},{"article":4,"iocs":36,"watch_terms":44},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":21,"category":22,"article_tags":25},"ebccef28-fbeb-4d6f-a750-6b27a08ce4d9","\"Beyond the AI-control surface, the host also preserved the operator’s alerting and command chann...","beyond-the-ai-control-surface-the-host-also-preserved-the-operator-s-alerting-an-237b42","\"Beyond the AI-control surface, the host also preserved the operator’s alerting and command channel on Telegram. Runner scripts across the Bissa scanner harness hardcoded a Telegram bot token tied to the bot bissapwned_bot (display name “BissaPwned”, bot user ID 8798206332) https:\u002F\u002Ft.co\u002FnNSRU8prqZ","Security researchers discovered that the Bissa scanner malware maintained command and control capabilities through a hardcoded Telegram bot token (bissapwned_bot, ID 8798206332) embedded in its runner scripts. The malware preserved both the AI-control surface and the operator's alerting and command channel, enabling remote operator control via Telegram messaging.","Bissa scanner malware preserved Telegram C2 channel with hardcoded bot token.",null,"https:\u002F\u002Fx.com\u002FTheDFIRReport\u002Fstatus\u002F2047288992945647903","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHGluakqWMAALHNN.jpg","2026-04-23T12:18:27+00:00","2026-04-23T13:00:05.46283+00:00",7,[18],{"name":19,"type":20},"Telegram","technology","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":21,"icon":11,"name":23,"slug":24},"Malware","malware",[26,31],{"category":27},{"id":28,"icon":11,"name":29,"slug":30},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":32},{"id":33,"icon":11,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[37,40],{"type":24,"value":38,"context":39},"Bissa scanner","Scanner malware with Telegram C2 capabilities",{"type":41,"value":42,"context":43},"url","https:\u002F\u002Ft.co\u002FnNSRU8prqZ","Referenced Twitter\u002FX link containing additional details",[]]