Dolphin X Malware Uses AI to Steal Data from 300+ Windows Applications

Dolphin X, a newly discovered Windows information-stealer and remote access trojan (RAT), targets over 300 applications to extract sensitive data, including cryptocurrency wallets and enterprise credentials. The malware features an AI profiler that ranks infected users based on their potential value to cybercriminals, allowing attackers to prioritize targets effectively. Researchers at Varonis Threat Labs identified the malware for sale on a cybercrime forum, where it has gained significant attention with over 3,000 views and confirmed sales. The AI profiler scores victims based on their application usage and browsing history, providing attackers with daily summaries of high-value targets. While the malware currently operates only on Windows, the developer has indicated plans for a Debian version. The subscription cost for using Dolphin X is $80 per month, which includes various capabilities to evade detection. The malware's extensive targeting and advanced features raise concerns about its potential impact on organizations and individuals alike.

Key Points: • Dolphin X targets over 300 applications, stealing sensitive data like SSH keys and cloud tokens. • The AI profiler ranks victims based on their potential financial value, aiding cybercriminals in prioritizing targets. • The malware is currently sold for $80 per month on a cybercrime forum, with plans for future support on Debian.