AI-powered Dolphin X malware targets 300+ applications

Security researchers have uncovered a sophisticated new malware tool that uses artificial intelligence to help cybercriminals prioritize their victims. The malware, known as Dolphin X, is a Windows-based infostealer and remote access trojan (RAT) that was discovered being advertised on a cybercrime forum.

Researchers from Varonis Threat Labs analyzed the malware's operator panel after finding it promoted online by a vendor using the alias "Kontraktnik." The seller advertises Dolphin X as an all-in-one service combining credential theft, remote computer control, surveillance, and distributed denial-of-service (DDoS) botnet capabilities. A key feature highlighted by researchers is the malware's "AI Profiler," which automatically scores infected users based on their application usage, browsing activity, and installed software. Attackers receive a daily summary with these risk scores and rankings, allowing them to efficiently identify high-value targets among potentially thousands of compromised machines.

The malware's data collection capabilities are extensive, targeting more than 300 applications according to its listing. A single stolen archive can contain information from nine...