Cybercriminals are exploiting the popularity of AI tools by creating fake platforms that promise advanced image and video editing. Users upload personal media, receiving malware called Noodlophile Stealer instead. This malware steals sensitive data, including browser credentials and cryptocurrency wallets. The sophisticated attack leverages deceptive websites and social media, targeting creators and small businesses, emphasizing the need for vigilance and security.
“PupkinStealer” A New .NET-Based Malware Steals Browser Credentials & Exfiltrate via Telegram
PupkinStealer is a C# malware that steals sensitive data, including browser credentials and desktop files, using Telegram for stealthy data exfiltration. Discovered in April 2025,
