Fake AI crypto-trading software spreads malware to hijack browser wallets

HP Wolf Security reported that a counterfeit AI crypto-trading assistant is distributing malware known as Needle Stealer. The malicious software, disguised as a legitimate trading tool, targets Windows users by replacing browser wallet extensions to steal credentials. The campaign, documented in HP's September threat report, utilizes search-engine poisoning and paid advertisements to lure victims into downloading a ZIP file containing a malicious DLL that bypasses Microsoft's SmartScreen reputation checks.