[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2iXm9EvMzM-fsLF-K-YXyNzsxE31gKkjuS3YaFO6Er0":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"48cdbd88-4812-4b31-a590-6a051d331032","New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims","new-dolphin-x-malware-uses-ai-profiler-to-rank-high-value-victims-1aaae2","Dolphin X malware targets more than 300 apps and includes an AI Profiler that scores infected Windows PCs to help criminals identify high-value victims quickly.","Varonis Threat Labs has identified Dolphin X, a new Windows infostealer and RAT advertised on cybercrime forums. The malware features an 'AI Profiler' that scores infected PCs based on application use and browsing activity, helping attackers prioritize high-value victims. It targets over 300 applications, collecting sensitive data like cryptocurrency wallet information, cloud credentials, and SSH keys.","New Dolphin X malware uses AI to rank Windows PCs for high-value targets.","https:\u002F\u002Fhackread.com\u002Fdolphin-x-malware-ai-profiler-rank-victims\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fdolphin-x-malware-ai-profiler-rank-victims-2.jpg","2026-07-24T10:09:52+00:00","2026-07-24T12:00:20.692091+00:00",8,[17,20],{"name":18,"type":19},"Kontraktnik","threat_actor",{"name":21,"type":22},"AI","technology","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":23,"icon":25,"name":26,"slug":27},null,"Malware","malware",[29,34,39,41],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[],{"controls":49,"vendors":129},[50,71,100],{"slug":51,"name":52,"problem":53,"products":54},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[55,63],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":72,"name":73,"problem":74,"products":75},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":101,"name":102,"problem":103,"products":104},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[105,113,121],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":147},"ai-powered-infostealer-prioritizes-high-value-targets-using-behavioral-profiling","AI-Powered Infostealer Prioritizes High-Value Targets Using Behavioral Profiling","Dolphin X represents a dangerous evolution in infostealer malware by leveraging an AI-based profiling system to automatically score and rank victims by their likely value to attackers — focusing resources on individuals with cryptocurrency wallets, cloud credentials, and SSH keys. This means a single infection can silently elevate to a high-priority breach without any additional attacker effort, accelerating the time-to-exploitation of sensitive assets. The malware's ability to target over 300 applications dramatically broadens its attack surface, making credential hygiene and endpoint monitoring more critical than ever. Organizations and individuals holding privileged credentials are particularly at risk, as the profiler specifically seeks out high-value indicators that map directly to financial and infrastructure access.",[135,136,137,138,139,140,141,142,143,144,145,146],"CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","CIS Control 10 – Malware Defenses","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 SC-28 – Protection of Information at Rest","NIST SP 800-53 SI-3 – Malicious Code Protection","NIST SP 800-53 AU-6 – Audit Record Review","GDPR Article 32 – Security of Processing","MITRE ATT&CK T1555 – Credentials from Password Stores","MITRE ATT&CK T1539 – Steal Web Session Cookie","MITRE ATT&CK T1041 – Exfiltration Over C2 Channel",{}]