Dolphin X: Advanced Windows Info-Stealer with AI Profiler
New malware targeting 300+ apps uses AI profiling to help criminals prioritize high-value targets.
1Next-Gen Information Stealer
Dolphin X emerges as a sophisticated info-stealer and Remote Access Trojan (RAT) capable of extracting data from over 300 applications. Marketed on cybercrime forums, this malware can bypass browser passwords, steal corporate credentials, and access cryptocurrency wallets with alarming efficiency.
2AI Profiler Feature
The most striking aspect of Dolphin X is its AI profiler tool. This feature scores infected users based on application usage, browsing history, and installed software, providing criminals with daily summaries to prioritize the most lucrative targets for maximum financial gain.
3Expansive Target Range
Beyond applications, the malware can steal files, credentials, cryptocurrencies, and even DevOps secrets. Security experts describe Dolphin X as one of the most comprehensive info-stealers ever seen due to its exceptionally broad attack surface and data collection capabilities.
4User-Friendly Subscription Model
Dolphin X offers a SaaS-like subscription model starting at $80/month for basic features, scaling up to $230/month for advanced capabilities. This approach significantly lowers the barrier to entry, allowing even less technically skilled criminals to deploy sophisticated malware.
5Security Recommendations
Experts advise against storing long-term credentials on disk and recommend behavior-based threat detection over signature-based systems. Monitoring for anomalies like explorer.exe running under non-default desktops becomes crucial for identifying potential HVNC sessions.
6The Dark Side of AI
Dolphin X exemplifies the growing trend of cybercriminals leveraging AI technologies, following previous discoveries like Bluekit and SpamGPT. This development poses new challenges for cybersecurity professionals, necessitating a reevaluation of traditional defense mechanisms in the face of increasingly sophisticated threats.