New Dolphin X Malware Uses AI to Rank Victims and Help Hackers Identify High-Value Targets Faster

Views: 52 views

406/69 Friday, July 24, 2026

Researchers from Varonis Threat Labs have identified a new Remote Access Trojan (RAT) called Dolphin X, which is being advertised for sale on cybercrime forums. The malware is notable because it incorporates artificial intelligence (AI) technology to analyze and rank victims, allowing attackers to filter and prioritize high-value targets or individuals of organizational importance. This reflects the growing sophistication of cybercriminal tools, as attackers increasingly apply advanced technologies to reduce the time needed to identify valuable targets and improve the efficiency of large-scale data theft.

Reports include screenshots of the control panel showing advanced surveillance features, particularly an AI Profiler system reserved for Ultimate-tier users. This system tracks application usage behavior, accessed website domains, and software installed on the victim’s device. It then processes the data into a risk score and generates daily summary reports for attackers to support decision-making. Dolphin X also claims the ability to steal login data from more than 300 applications, including web browsers, cryptocurrency wallets, cloud access keys, and developer tools. Although researchers are still analyzing the malware’s real-world behavior from samples, the command set shown in the control panel indicates that the tool has the potential to cause significant damage to sensitive data.

To reduce risk and prevent potential impact, users and administrators should strengthen their organization’s cybersecurity posture. Administrators should enforce multi-factor authentication for all accounts, especially accounts with access to cloud systems and software development environments, and closely monitor abnormal access behavior. Systems and anti-malware software should also be kept up to date. Most importantly, personnel should be reminded to avoid downloading files or opening links from sources that cannot be verified as trustworthy, in order to reduce the risk of becoming victims of attacks using advanced technologies of this kind.

Source: https://www.bleepingcomputer.com/news/security/new-dolphin-x-malware-uses-ai-to-rank-high-value-targets/