Threat researchTracked by EncryptLayer intelligence

NIK C2: The new AI-enabled command-and-control framework

Published by
Cisco Talos Blog
Published
29 Oct 2026
Indicators
1 verified

The report

Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”

Cisco Talos Blog

Read the full analysis: NIK C2: The new AI-enabled command-and-control framework (Cisco Talos Blog).

Indicators

Malware C

  • total-sitevv[.]lol

Defanged so they cannot be clicked by mistake: replace [.] with a dot. Shared hosting and CDN addresses named in the report are left out on purpose, so blocking these does not break legitimate sites.

How this is tracked

EncryptLayer intelligence, A.R.P. Syndicate’s open threat feed, reviews each indicator against the published report before adding it (#30). This page is generated from that record and the report’s own title and summary; nothing is rewritten.