Threats Tagged 'cloud tokens'

Dolphin X is a Windows-based stealer and remote access trojan that targets over 300 applications including browsers, cryptocurrency wallets, password managers, and cloud command-line tools. It collects a wide range of credentials such as browser logins, SSH keys, .env files, and cloud tokens. A notable feature is its AI Profiler, which automatically scores infected victims based on their application usage and browsing activity to help attackers identify high-value targets. The malware is distributed via a builder operated on a remote server, offering optional mutation engines to evade detection. It poses a significant risk to developers and organizations by potentially exposing entire production environments through compromised DevOps credentials. No known exploits in the wild or patches are currently documented.