A new stealer hiding behind AI hype. [Research Saturday]

CyberWire Daily

N2K Networks, Inc.

Daily News, Tech News, News, Technology

4.6 • 1K Ratings

🗓️ 7 June 2025

⏱️ 22 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

This week, we are joined by Michael Gorelik, Chief Technology Officer from Morphisec, discussing their work on "New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms." A new threat dubbed Noodlophile Stealer is exploiting the popularity of AI-powered content tools by posing as fake AI video generation platforms, luring users into uploading media in exchange for malware-laced downloads. Distributed through convincing Facebook groups and viral campaigns, the malware steals browser credentials, cryptocurrency wallets, and can deploy a remote access trojan like XWorm. The campaign uses a layered, obfuscated delivery chain disguised as legitimate video editing software, making it both deceptive and difficult to detect. The research can be found here: ⁠⁠New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the Cyberwire Network, powered by N2K.
0:10.2	Hey, everybody, Dave here.
0:14.5	I've talked about Delete Me before, and I'm still using it because it still works.
0:19.8	It's been a few months now, and I'm just as impressed today as I was when I signed up.
0:25.1	Delete me keeps finding and removing my personal information from data broker sites,
0:30.3	and they keep me updated with detailed reports,
0:33.0	so I know exactly what's been taken down.
0:36.0	I'm genuinely relieved knowing my privacy isn't something I have to worry about every day.
0:41.3	The Delete Me team handles everything.
0:43.8	It's the set it and forget it, peace of mind.
0:47.2	And it's not just for individuals.
0:49.2	Delete Me also offers solutions for businesses,
0:51.8	helping companies protect their employees' personal information
0:55.3	and reduce exposure to social engineering and fishing threats. And right now, our listeners get a special
1:02.0	deal, 20% off your DeleteMe plan. Just go to join deleteme.com slash N2K and use promo code N2K at checkout.
1:12.9	That's join delete me.com slash N2K code N2K.
1:18.1	Okay. Hello, everyone and welcome to the CyberWires Research Saturday.
1:35.5	I'm Dave Bittner, and this is our weekly conversation with researchers and analysts
1:40.1	tracking down the threats and vulnerabilities, solving some of the hard problems and protecting ourselves
1:46.0	in a rapidly evolving cyberspace.
1:48.0	Thanks for joining us.
1:54.0	So this is how we discovered, basically, the execution of the Infostele
	...

Transcript will be available on the free plan in 20 days. Upgrade to see the full transcript now.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.