New Noodlophile Malware Spreads Through Fake AI Video Generation Platforms

Cybercriminals have unleashed a new malware campaign using fake AI video generation platforms as a lure.

Dubbed Noodlophile Stealer, this previously undocumented infostealer targets unsuspecting users by exploiting their enthusiasm for AI-powered content creation tools.

Disguised as legitimate services promising to transform images into videos, these fraudulent platforms-often promoted through viral social media campaigns and Facebook groups with thousands of views-trick users into downloading malicious payloads that harvest browser credentials, cryptocurrency wallets, and other sensitive data.

In many instances, the malware also deploys a remote access trojan (RAT) like XWorm, granting attackers deeper control over compromised systems.

Cybercriminals Exploit AI Hype

The attack chain begins when users, lured by advertisements on platforms mimicking popular tools like Luma Dream Machine or CapCut, upload personal images or videos to these fake websites.

After a deceptive loading screen, victims are prompted to download their “processed” content, which ...