# A new stealer hiding behind AI hype.

Page: https://stenobird.com/podcast/research-saturday-1377435/a-new-stealer-hiding-behind-ai-hype
Text version: https://stenobird.com/podcast/research-saturday-1377435/a-new-stealer-hiding-behind-ai-hype.md
Podcast: [Research Saturday](https://stenobird.com/podcast/research-saturday-1377435)
Published: 2025-11-29T06:00:00+00:00
Episode link: https://thecyberwire.com/podcasts/research-saturday/380/notes
Audio file: https://pdst.fm/e/pdrl.fm/6ec23a/traffic.megaphone.fm/CYBW9455701978.mp3?updated=1764012596
Processing state: failed
JSON: https://stenobird.com/v1/public/podcasts/research-saturday-1377435/episodes/a-new-stealer-hiding-behind-ai-hype
Duration seconds: 1328

## Resource

Please enjoy this encore of Research Saturday. This week, we are joined by ⁠Michael Gorelik⁠, Chief Technology Officer from ⁠Morphisec⁠, discussing their work on "New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms." A new threat dubbed Noodlophile Stealer is exploiting the popularity of AI-powered content tools by posing as fake AI video generation platforms, luring users into uploading media in exchange for malware-laced downloads. Distributed through convincing Facebook groups and viral campaigns, the malware steals browser credentials, cryptocurrency wallets, and can deploy a remote access trojan like XWorm. The campaign uses a layered, obfuscated delivery chain disguised as legitimate video editing software, making it both deceptive and difficult to detect. The research can be found here: ⁠⁠⁠New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms Learn more about your ad choices. Visit megaphone.fm/adchoices

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/research-saturday-1377435/episodes/a-new-stealer-hiding-behind-ai-hype/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/research-saturday-1377435/a-new-stealer-hiding-behind-ai-hype.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.