This sneaky malware scans over 300 apps to create an AI profile that tells hackers which victims to target.

Varonis Threat Labs discovered Dolphin X, a powerful RAT with 329 features divided into 10 categories.
Its remarkable “AI Profiler” classifies victims by usage and sends daily summaries to attackers.
Malware is sold on the dark web through subscription tiers, starting at $80 per month.

What if malware could talk to its operator and tell them which infected victims deserve attention and which don’t? A few years ago this might have been science fiction, but today, thanks to advances in artificial intelligence (AI), not only is it possible, but it’s also already available on the black market.

Security researchers Varonis Threat Labs recently revealed that they have discovered a rather revolutionary remote access Trojan (RAT) called Dolphin X.

Even without advanced AI capabilities, the RAT is quite powerful, acting as an information stealer, hidden computer network (HVNC), DDoS botnet, or loader. Its infostealer capabilities are simply impressive: it can target over 300 applications to steal browser passwords, corporate credentials, cryptocurrency wallet data, DevOps secrets, and different sensitive files, and it comes with 329 features divided into 10 categories.

AI profiler

However, it is the AI’s capability that has stunned researchers. Called “AI Profiler,” the feature classifies victims based on app usage, browsing history, and more, sending a daily summary to attackers.

The malware is now offered on the dark web, where other criminals can subscribe to one of three tiers. The basic tier costs $80 per month, while the top tier costs around $230 per month. The lifetime subscription costs $1,140 for basic access and goes up to $3,420 for the top tier.

“The scope of Dolphin “On the wrong machine, a single infection could expose access to an entire production environment.”

“Its use of AI is also interesting because it shows us how AI is being integrated into more cybercrime tools.”