Fake AI Tools Spread Noodlophile Malware Targeting Crypto Wallets

Cybercriminals are deploying fake AI-themed platforms on social media to distribute Noodlophile malware, a sophisticated information stealer. The malicious operation tricks users into downloading ZIP archives that compromise sensitive data, including browser credentials and cryptocurrency wallet details.

Security researchers at Morphisec identified the campaign, noting its departure from traditional phishing methods. "These threat actors construct convincing AI-themed fronts, often promoted through legitimate-looking channels," said researcher Shmuel Uzan. The malware’s origins are suspected to trace back to Vietnam.

Noodlophile’s capabilities extend beyond data harvesting—it can deploy additional payloads like remote access trojans. The emergence highlights growing security risks in the crypto ecosystem as attackers innovate beyond conventional attack vectors.