AI-integrated malware hides its C2 inside normal AI API traffic. The behavioural signals that still work, and the CAIRN …