Google Gemini CLI abused as a hacking agent, malware botnet operator

A Russian-speaking threat actor known as 'bandcampro' used Google's open-source Gemini CLI AI tool as a hacking agent and to operate a small-scale botnet. The abuse highlights new risks from AI tools deployed with minimal oversight. Security teams are urged to monitor CLI-based AI interactions for malicious use.