This devious malware scans over 300 apps to create an AI profile that tells hackers which victims to target.

Varonis Threat Labs discovered Dolphin X, a powerful RAT with 329 functions in 10 categories
Its prominent “AI Profiler” classifies victims by usage and sends summaries to attackers daily
The malware is sold on the dark web through subscription tiers, starting at $80 a month.

What if malware could talk to its operator and tell which infected victims are worth paying attention to and which are not? A few years ago, this might have been science fiction, but today, thanks to advances in Artificial Intelligence (AI), it is not only possible, but it is already available on the black market.

Security researchers Varonis Threat Labs recently revealed to have found a rather revolutionary Remote Access Trojan (RAT) called Dolphin X.

Even without advanced AI capabilities, the RAT is quite powerful and acts as an information stealer, a Hidden Virtual Network Computing (HVNC), a DDoS botnet, or a loader. Its information theft capabilities alone are nothing short of impressive: it can target over 300 apps to steal browser passwords, business credentials, cryptocurrency wallet data, DevOps secrets, and different sensitive files, and it comes with 329 features divided into 10 categories.

AI profiler

However, it is the ability of AI that surprised researchers. Called “AI Profiler,” the feature classifies victims by app usage, browsing history, and more, sending a daily summary to attackers.

The malware is now offered on the dark web, where other criminals can subscribe to one of three tiers. The basic tier costs $80 per month, while the top tier costs around $230 per month. The lifetime subscription costs $1,140 for basic access and goes up to $3,420 for the top tier.

“The scope of Dolphin “On the wrong machine, a single infection could expose access to an entire production environment.”

“Their use of AI is also interesting because it shows us how AI is being integrated into more cybercrime tools.”