AI Trading Agent Exposed as Malware Stealing Crypto Wallet Passwords
Cybercriminals have been using malware disguised as an AI-powered crypto trading agent to steal passwords from browser wallets. The attackers created a website promoting software that supposedly used artificial intelligence to trade crypto around the clock.
The fake trading agent, known as Needle Stealer, was targeted at users who were searching online for AI tools to automate their crypto trades between April and June 2026. When installed, it searched for browser wallet extensions, including MetaMask, Coinbase Wallet, and Phantom, and replaced them with malicious copies.
The replacement extensions looked like the genuine ones, but when victims entered their passwords, the fake extensions sent them to a server controlled by the attackers. The stolen password and identifying information could allow the criminals to access the victim's crypto.