Your dentist's office might have just gotten hacked by an AI. That's the unsettling gist of a recent cybersecurity discovery. A hacker, going by "bandcampro," used Google's Gemini CLI [Command Line Interface, a text-based tool for interacting with a computer program] to control a network of compromised computers, including eight from dental clinics.
Essentially, this hacker turned Google's AI into their personal assistant for cybercrime. They fed instructions to Gemini CLI, and the AI helped them do things like crack passwords and set up a residential proxy [a way to hide their online identity by routing internet traffic through another computer]. It's like a chef using a smart oven to automate parts of their cooking, but instead of baking bread, bandcampro was orchestrating digital mischief.
This matters because it shows how readily available AI tools, even open-source ones like Google's Gemini, can be repurposed for malicious activities. While AI has been used in cyberattacks before, this is a clear example of a single person leveraging off-the-shelf AI to automate sophisticated hacking tasks, making it easier for less technically skilled individuals to carry out complex attacks. It highlights a growing trend where AI democratizes, or makes accessible, powerful capabilities, for both good and bad actors.
The findings came from analyzing nearly 200 sessions of bandcampro using Gemini CLI between mid-March and late April 2026. This isn't just a theoretical threat, it’s a live demonstration of how AI can be integrated into ongoing cyber operations. While the source didn't compare this to other AI models like OpenAI's GPT or Meta's Llama, the takeaway is that any accessible, powerful AI could potentially be used in similar ways.
This incident is a stark reminder that as AI capabilities advance, so too does the potential for misuse. For everyday folks, it underscores the critical importance of strong, unique passwords for all your online accounts and devices. Think of it this way: if a hacker can use AI to guess weak passwords faster, you need stronger defenses. Don't reuse passwords, and consider a password manager to keep track of complex ones.
AI is making cybercrime more accessible, demanding stronger digital defenses from everyone.