New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims

Varonis Threat Labs documents Dolphin X, a Windows infostealer/RAT sold on cybercrime forums that exfiltrates browser passwords, crypto wallets, SSH keys, cloud tokens and .env files and uses an “AI Profiler” to rank high-value victims; the malware is offered with a builder that supports custom builds, mutation/evasion, persistence and remote control. Researchers analyzed the seller’s panel and network traffic (not full runtime behavior) and recommend isolating infected machines, rebuilding or scanning from clean devices, revoking tokens, and replacing exposed wallets.