logo

Microsoft Store App Vibing.exe Accused of Harvesting Screens, Audio, and Clipboard Data

ID: 277bf9de-117c-53b9-892e-7ce3292bcde3

STIX ID: report--277bf9de-117c-53b9-892e-7ce3292bcde3

Feed Name: Cyber Press

Threat Score
75/100

Date Published: 2026-04-27

Date Updated: 2026-04-27

Author: AnuPriya

...
...

Vibing.exe, an application distributed through the Microsoft Store and presented as an AI productivity tool, covertly captured screenshots, clipboard content, and microphone audio, appended a hardware GUID for persistent tracking, and exfiltrated data via WebSocket connections to an Azure endpoint; Microsoft removed the app and disabled its backend after public disclosure and investigators published file and network IOCs for hunting and blocking.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.