● Covered by 1 source · 1 reportMedium impact1 negative
Dolphin X Malware Uses AI Profiling to Rank High-Value Targets
Key points
- Dolphin X is a new remote access trojan advertised on a cybercrime forum.
- It includes an "AI Profiler" to score and rank infected users.
- The profiler analyzes application usage, risk scores, and installed software.
- Varonis Threat Labs analyzed the malware's operator panel and builder.
Dolphin X Malware Emerges with AI Profiling
A new remote access trojan (RAT) called Dolphin X has been identified, featuring an "AI Profiler" designed to assess and rank infected users. This malware is being advertised on cybercrime forums by a vendor using the alias "Kontraktnik," promoting it as an all-in-one remote access tool.
AI Profiler Functionality
The Dolphin X operator panel lists 329 features, including a credential-stealing capability targeting over 300 applications. The notable "AI Profiler" analyzes data collected from compromised computers to assign a risk score to each victim. This feature is described as an "AI behavioral profiler with app usage tracking, risk score, and daily summary."
Automating Victim Prioritization
Credential-stealing malware often yields a large volume of compromised accounts, making manual review for high-value targets time-consuming. Dolphin X's AI Profiler automates this process by categorizing and ranking infected machines. This allows attackers to quickly identify victims who may provide access to valuable accounts, cryptocurrency, corporate networks, cloud environments, or production systems.
Analysis by Varonis Threat Labs
Varonis Threat Labs researcher Daniel Kelley analyzed the Dolphin X malware. Varonis obtained the operator panel and examined the malware builder and network traffic in an isolated lab environment. Kelley confirmed the presence of the AI Profiler in the operator panel and found technical strings supporting its profiling workflow, such as "Auto-Start AI Profiler" and "risk_score."
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
A new remote access trojan named Dolphin X incorporates an "AI Profiler" feature to score and rank infected users, helping cybercriminals prioritize victims. This development allows attackers to automate the identification of high-value targets from a large pool of compromised accounts, potentially increasing the efficiency of cyberattacks.