{"$schema": "https://iptc.org/std/ninjs/ninjs-schema_3.2.json", "uri": "urn:newsml:wireva.mib.news:item:6216256c-2f23-45fe-9b9f-f95eecee66ca", "type": "text", "profile": "standard", "version": "1", "versioncreated": "2026-10-05T19:04:59.463283Z", "firstcreated": "2026-10-05T19:01:34.326961Z", "pubstatus": "usable", "urgency": 5, "language": "en", "headline": "Windows Malware x47.c Uses Grok AI to Evade Detection, Researchers Say", "byline": "Evan Emerson", "located": "United States", "copyrightholder": "Haydamax OÜ", "copyrightnotice": "Wireva / Cronkite", "usageterms": "Subscribers may republish this item in full, including translation and trimming, with the credit “Wireva / Cronkite”. Set rel=canonical to https://cronkite.online/news/windows-malware-x47-c-uses-grok-ai-to-evade-detection-researchers-say/ when publishing on the web.", "description_text": "Security researchers at Qrator Research Labs have uncovered a new Windows malware called x47.c that reportedly uses xAI's Grok chatbot to help it maintain persistence on infected computers. The malware, advertised by a threat actor known as WraithTools, also steals passwords, browser cookies, and cryptocurrency wallet data, and can launch denial-of-wallet attacks against paid AI accounts.", "altids": {"mosaic": "6216256c-2f23-45fe-9b9f-f95eecee66ca", "story": "70045d9b-6b2d-4cbf-bfa0-164fb8777dee", "slug": "windows-malware-x47-c-uses-grok-ai-to-evade-detection-researchers-say"}, "subject": [{"name": "Science", "rel": "direct", "literal": "science", "code": "medtop:13000000", "scheme": "http://cv.iptc.org/newscodes/mediatopic/", "uri": "http://cv.iptc.org/newscodes/mediatopic/13000000"}], "place": [{"name": "United States", "literal": "us", "code": "US", "scheme": "http://cv.iptc.org/newscodes/countrycodes/"}], "person": [], "organisation": [], "genre": [{"name": "Standard story", "literal": "standard"}], "service": [{"name": "Wireva", "literal": "wireva"}], "associations": {"featuremedia": {"uri": "urn:newsml:wireva.mib.news:media:c4cffc3e-36cf-4937-a7a5-34d8bdde97fd", "type": "picture", "version": "1", "pubstatus": "usable", "headline": "Windows malware uses Grok AI to help stay hidden, researchers say", "description_text": "Windows Malware x47.c Uses xAI's Grok to Stay Hidden, Researchers Say", "copyrightholder": "a57.foxnews.com", "copyrightnotice": "Windows malware uses Grok AI to help stay hidden, researchers say", "usageterms": "Picture belongs to the source publication: address and terms are delivered, the file is not.", "altids": {"wireva": "c4cffc3e-36cf-4937-a7a5-34d8bdde97fd"}, "extra": {"wireva:delivery_mode": "link_only", "wireva:rights": {"licence": "", "licence_url": "", "licence_raw": "RSS source", "licence_verified_at": "2026-10-05T19:04:59.477837Z", "attribution_required": true, "attribution_text": "Windows malware uses Grok AI to help stay hidden, researchers say", "redistribution_allowed": false, "commercial_use_allowed": false, "modifications_allowed": false, "share_alike_required": false}, "wireva:provenance": {"creator": "", "source_name": "a57.foxnews.com", "source_url": "https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2026/10/931/523/man-working-on-laptop.jpg?ve=1&tl=1", "source_page_url": "https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2026/10/931/523/man-working-on-laptop.jpg?ve=1&tl=1", "our_page_url": "https://cronkite.online/news/windows-malware-x47-c-uses-grok-ai-to-evade-detection-researchers-say/"}, "wireva:role": "lead"}, "renditions": {"source": {"href": "https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2026/10/931/523/man-working-on-laptop.jpg?ve=1&tl=1", "mimetype": "image/jpeg"}}}}, "extra": {"wireva:story": {"uri": "urn:newsml:wireva.mib.news:story:70045d9b-6b2d-4cbf-bfa0-164fb8777dee", "slug": "story-20261005-38", "status": "updated", "languages": ["en", "uk"], "item_count": 5, "is_breaking": false}, "wireva:rights": {"class": "agency_original", "redistribution_allowed": true, "commercial_use_allowed": true, "modifications_allowed": true, "share_alike_required": false, "attribution_required": true, "attribution_text": "Wireva / Cronkite", "canonical_required": true, "canonical_url": "https://cronkite.online/news/windows-malware-x47-c-uses-grok-ai-to-evade-detection-researchers-say/", "linkback_required": true, "licence": "Wireva subscriber licence", "licence_url": "", "licensor": "Haydamax OÜ", "valid_until": null, "excerpt_max_chars": 0, "decided_by_rule": "agency_original_verified", "needs_review": false}, "wireva:provenance": {"production_method": "automated", "ai_stages": {"editing": true, "drafting": true, "headline": true, "discovery": true, "classification": true, "image_selection": true, "source_collection": true, "cross_source_comparison": true}, "model": "", "human_reviewed": false, "reviewed_by": "", "reviewed_at": null, "editorial_control": true, "editorial_responsibility": "Haydamax OÜ (Wireva)", "factchecked": false, "verification_status": "multi_source", "independent_confirmations": 3, "official_source_used": false, "used_press_release": false, "public_interest": false, "ai_disclosure_required": false, "ai_disclosure_text": "", "independence_check": {"status": "passed", "score": 0.09, "checked_at": "2026-10-05T19:04:59.475322Z"}}, "wireva:publication": {"name": "Cronkite", "domain": "cronkite.online", "country": "US", "url": "https://cronkite.online/news/windows-malware-x47-c-uses-grok-ai-to-evade-detection-researchers-say/"}, "wireva:links": {"self": "https://wireva.mib.news/api/v1/items/6216256c-2f23-45fe-9b9f-f95eecee66ca", "html": "https://wireva.mib.news/item/6216256c-2f23-45fe-9b9f-f95eecee66ca/windows-malware-x47-c-uses-grok-ai-to-evade-detection-researchers-say/", "story": "https://wireva.mib.news/story/story-20261005-38/"}, "wireva:metrics": {"word_count": 718, "char_count": 4602, "reading_time_seconds": 329}}}