Cybercriminals have begun integrating artificial intelligence into information-stealing malware to automate the analysis of stolen data. Experts from BI.ZONE Threat Intelligence identified two such offerings on dark web forums in September, marking a shift toward automated victim profiling.
Traditional stealers typically target passwords, cookies, credit card details, and crypto wallet data. The new AI-enhanced versions expand this scope to include chat histories with AI assistants, source code, documents, and account tokens. The integrated neural networks generate summaries of the victim, including their likely profession, interests, and browsing habits.
The Bee Stealer, priced at $300, is one such tool that analyzes exfiltrated data to identify high-value targets. In one instance, the software successfully categorized a victim as a web developer specializing in cybersecurity. Another example is the macOS-based AVENGER stealer, which processes data from browser history, terminal logs, email, and configuration files.
According to BI.ZONE, these tools allow attackers to rapidly filter through large volumes of logs to isolate valuable targets, such as developers with corporate system access or holders of significant crypto assets. While these incidents remain isolated, the emergence of multiple listings suggests a growing trend in the use of automated analysis for cyberattacks.
