A New Malware Threat Emerges with AI-Powered Profiling Feature
Cybercriminals have been exploiting artificial intelligence (AI) in various ways, from launching spam campaigns to conducting autonomous cyberattacks. The latest development in this trend is a new malware called Dolphin X, which uses an AI-powered profiling feature to identify high-value targets among infected users.
This remote access trojan (RAT) is being advertised on underground forums by a vendor known as “Kontraktnik,” who claims it offers 329 features across ten categories. One of its most notable features is the “AI Profiler,” which analyzes information collected from infected computers and assigns each victim a risk score.
The AI Profiler works by processing data such as application usage, browser domains, installed software, and other factors to produce ranked profiles of victims. These scores are then presented to attackers in daily summaries, allowing them to prioritize machines that may provide access to valuable accounts, cryptocurrency, corporate networks, cloud environments, or production systems.
The use of AI-powered profiling in Dolphin X raises concerns about the ability of cybercriminals to target high-value assets with greater precision and efficiency. This feature can automate the process of identifying potential targets, making it easier for attackers to focus their efforts on the most valuable victims.
The malware also operates as a credential stealer, targeting more than 300 applications, including popular browsers, cryptocurrency wallet extensions, password managers, and cloud command-line tools. It claims to steal sensitive information such as .env files, SSH keys, cloud access tokens, browser login data, and cryptocurrency wallet information.
While the AI Profiler is a key feature of Dolphin X, it’s worth noting that Varonis Threat Labs researcher Daniel Kelley could not determine what specific artificial intelligence engine is being used without analyzing a live malware sample. However, the presence of technical strings supporting the profiling workflow suggests that the feature is indeed included and functional.
The rise of AI-powered malware like Dolphin X highlights the growing importance of staying ahead of emerging threats in the cybersecurity landscape. As attackers continue to leverage AI to improve their tactics, it’s essential for security teams to remain vigilant and adapt their strategies accordingly.
In practical terms, this means that organizations should prioritize regular threat hunting exercises and implement robust detection mechanisms to identify potential indicators of compromise (IOCs). By staying informed about emerging threats like Dolphin X and adapting their defenses accordingly, businesses can reduce the risk of successful attacks and protect themselves against increasingly sophisticated cybercrime campaigns.
Source: Bleeping Computer — 2026-07-23