Sneaky Windows stealer targets 300+ apps, gives crims an AI profiler to maximize profits

A new Windows stealer is targeting over 300 applications, providing criminals with an AI profiler to maximize profits from stolen data. The malware leverages vulnerabilities in extensions to compromise websites and gain access to user information. This represents a significant escalation in targeted data theft and highlights the growing sophistication of cybercrime. The stealer operates by exploiting flaws within extensions, allowing attackers to gain access to sensitive data and build detailed profiles of users' online activity. The Register reports that the malware is particularly effective at identifying and exploiting vulnerabilities in open-source CMS platforms powering a million websites worldwide. The vulnerabilities lie within extensions like iCagenda and Balbooa Forms, impacting sites utilizing Joomla. The threat actors are utilizing these weaknesses to steal user data and build AI-powered profiles to better target future attacks.