Back Gbhackers

Noodlophile Malware Authors Use Fake Job Ads and Phishing Schemes to Evolve Tactics

Gbhackers •Mayura Kathir • February 16, 2026

Hey folks in the threat‑hunting world looks like our coverage of the Noodlophile infostealer has struck a nerve with its creators. The operators used inflated engagement metrics and fake popularity scores to lure victims into downloading malicious ZIP archives. Once executed, these payloads quietly harvested user credentials, crypto‑wallet data, browser information, and more all exfiltrated through Telegram […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Noodlophile Malware Adopts Fake Job Ads and Phishing Tactics The Noodlophile information stealer, first identified in May 2025, has advanced its tactics by utilizing fake job postings and phishing schemes to deceive users into downloading malicious ZIP files. These campaigns primarily target individuals by masquerading as advertisements for AI video generation platforms, leading to the exfiltration of sensitive data such as credentials and cryptocurrency wallets. 2 sources 41

Extracted Entities

Noodlophile Malware Authors Use Fake Job Ads and Phishing Schemes to Evolve Tactics

The full story

Extracted Entities

Attack Types (2)

Malware (1)

MITRE ATT&CK (3)

Platforms (1)