Sneaky Windows stealer targets 300+ apps, gives crims an AI profiler to maximize profits

Varonis Threat Labs identified Dolphin X, a Windows information-stealer/RAT being sold on a cybercrime forum that reportedly targets over 300 applications to harvest enterprise credentials, crypto wallets, .env files, SSH keys, cloud tokens and other secrets; it also features an "AI Profiler" to score and prioritize victims and offers tiered subscription-based evasion and obfuscation capabilities, with forum sales and positive feedback indicating active use though Varonis did not execute a malware sample.