New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims
New Dolphin X malware uses AI to rank Windows PCs for high-value targets.
Varonis Threat Labs has identified Dolphin X, a new Windows infostealer and RAT advertised on cybercrime forums. The malware features an 'AI Profiler' that scores infected PCs based on application use and browsing activity, helping attackers prioritize high-value victims. It targets over 300 applications, collecting sensitive data like cryptocurrency wallet information, cloud credentials, and SSH keys.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonDolphin X represents a dangerous evolution in infostealer malware by leveraging an AI-based profiling system to automatically score and rank victims by their likely value to attackers — focusing resources on individuals with cryptocurrency wallets, cloud credentials, and SSH keys. This means a single infection can silently elevate to a high-priority breach without any additional attacker effort, accelerating the time-to-exploitation of sensitive assets. The malware's ability to target over 300 applications dramatically broadens its attack surface, making credential hygiene and endpoint monitoring more critical than ever. Organizations and individuals holding privileged credentials are particularly at risk, as the profiler specifically seeks out high-value indicators that map directly to financial and infrastructure access.
What helps against this
How we list vendors- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.