As cited
Copy frozen at (site build).
threat intel
Fake AI trading agent steals crypto wallet passwords
Attackers created a counterfeit website for an artificial intelligence (AI) crypto trading agent to distribute Needle Stealer malware, which hijacks browser wallet extensions and exfiltrates credentials to attackers. HP identified the campaign operating between April and June 2026, targeting users of popular wallets including MetaMask, Coinbase Wallet, and Phantom. Victims were lured through search results and advertisements promoting fraudulent AI agent downloads.
Why it matters: Cryptocurrency users and practitioners managing browser-based wallets face credential theft through deceptive AI agent distribution; teams should alert users to verify wallet sources and review browser extension permissions immediately.
- Source published
- First seen by Cybersecurity Tracker