Microsoft Store App Vibing.exe Accused of Harvesting Screens, Audio, and Clipboard Data
ID: 277bf9de-117c-53b9-892e-7ce3292bcde3
STIX ID: report--277bf9de-117c-53b9-892e-7ce3292bcde3
Feed Name: Cyber Press
Threat Score
Vibing.exe, an application distributed through the Microsoft Store and presented as an AI productivity tool, covertly captured screenshots, clipboard content, and microphone audio, appended a hardware GUID for persistent tracking, and exfiltrated data via WebSocket connections to an Azure endpoint; Microsoft removed the app and disabled its backend after public disclosure and investigators published file and network IOCs for hunting and blocking.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
