Artificial Intelligence Policy Tracker
Search
Menu

AI incident ·

Noodlophile Stealer Reportedly Distributed Through Allegedly Fraudulent AI Content Platforms

8 news reports Snapshot 7 Sep 2026
On this page 8 sections

In brief

An AI system built by Unknown Developer Of Noodlophile Stealer and deployed by Unknown Developer Of Noodlophile Stealer, Unknown Actors Operating Fraudulent Ai Themed Websites and 1 other allegedly harmed Users Whose Devices Were Potentially Compromised Via Remote Access Trojans (Rats), Targets Of Credential Theft and 2 others.

Risk domain
Malicious Actors & Misuse Fraud, scams, and targeted manipulation
Occurred
Coverage
8 reportsMay 2025

What happened

A campaign reportedly used fake AI video generation sites to distribute malware under the guise of AI-generated content. Promoted via social media, these sites allegedly tricked users into downloading files containing Noodlophile Stealer, a previously unreported infostealer, and in some cases XWorm. The malware harvested credentials and could enable remote access.

Laws on record for this risk area

Policy angle: Classified under Malicious Actors & Misuse (Fraud, scams, and targeted manipulation) in the MIT AI Risk Repository taxonomy; 5 instruments on record cover this risk area.

Matched from the record's risk category and country to the instruments in effect recorded here: a law listed covers the area, which is not a finding that it applies to this incident. A reviewer can correct the match in the repository (data/external/incident_overrides.yaml).

News reports (8)

Titles link to the original publisher; report text is not reproduced here.

  1. New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms
    morphisec.com · Shmuel Uzan
  2. Fake AI video generators drop new Noodlophile infostealer malware
    bleepingcomputer.com · Bill Toulas
  3. Attackers Lace Fake Generative AI Tools With 'Noodlophile' Malware
    darkreading.com · Alexander Culafi
  4. New Noodlophile Malware Spreads Through Fake AI Video Generation Platforms
    gbhackers.com · Aman Mishra
  5. Fake image-to-video AI sites deliver novel ‘Noodlophile’ infostealer
    scworld.com · Laura French
  6. Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures
    thehackernews.com · Ravie Lakshmanan
  7. Fake AI Video Tools Spreading New “Noodlophile” Malware, Targets Thousands on Facebook
    esecurityplanet.com · Aminu Abdullahi
  8. Cybercriminals trick users with fake AI apps
    dig.watch · digwatch

Who was involved

Alleged harmed party
Users Whose Devices Were Potentially Compromised Via Remote Access Trojans (Rats), Targets Of Credential Theft, Small Businesses Targeted By Noodlophile Stealer, Individuals Targeted By Noodlophile Stealer

Classification (MIT AI Risk Repository taxonomy)

Causal entity
Human
Intent
Intentional
Timing
Post-deployment
Harm level
—
Sectors
—
Countries
—

Risk entries describing this failure mode

Entries from the MIT AI Risk Repository coded to subdomain 4.3.

  • Defamation/libel/slander

    "Defamation/libel/slander - Use of a technology system to create, facilitate or amplify false perception(s) about an individual, group, or organisation."

    A Collaborative, Human-Centred Taxonomy of AI, Algorithmic, and Automation Harms (Abercrombie2024)

  • IP/copyright loss

    "IP/copyright loss - Misuse or abuse of an individual or organisation’s intellectual property, including copyright, trademarks, and patents."

    A Collaborative, Human-Centred Taxonomy of AI, Algorithmic, and Automation Harms (Abercrombie2024)

  • Cheating/plagiarism

    "Cheating/plagiarism - Use of another person’s or group’s words or ideas without consent and/or acknowledgement."

    A Collaborative, Human-Centred Taxonomy of AI, Algorithmic, and Automation Harms (Abercrombie2024)

  • Dehumanisation/objectification

    "Dehumanisation/objectification - Use or misuse of a technology system to depict and/or treat people as not human, less than human, or as objects."

    A Collaborative, Human-Centred Taxonomy of AI, Algorithmic, and Automation Harms (Abercrombie2024)

  • Impersonation/identity theft

    "Impersonation/identity theft - Theft of an individual, group or organisation’s identity by a third-party in order to defraud, mock or otherwise harm them."

    A Collaborative, Human-Centred Taxonomy of AI, Algorithmic, and Automation Harms (Abercrombie2024)

  • Financial and business

    "Financial and Business - Use or misuse of a technology system in a manner that damages the financial interests of an individual or group, or which causes strategic, operational, legal or financial harm to a business or...

    A Collaborative, Human-Centred Taxonomy of AI, Algorithmic, and Automation Harms (Abercrombie2024)

  • Cybersecurity

    "LLMs may exacerbate cybersecurity risks in various ways (Newman, 2024). Firstly, LLMs may significantly amplify the effectiveness of deceptive operations aimed at tricking people into disclosing sensitive information or...

    Foundational Challenges in Assuring Alignment and Safety of Large Language Models (Anwar2024)

  • Misinformation and Manipulation

    "Recent studies have demonstrated that LLMs can be exploited to craft deceptive narratives with levels of persuasiveness similar to human-generated content (Pan et al., 2023b; Spitale et al., 2023), to fabri- cate fake n...

    Foundational Challenges in Assuring Alignment and Safety of Large Language Models (Anwar2024)

Incidents in the same risk subdomain

All incidents in this subdomain

Source record: incident #1080 on the AI Incident Database · all 8 reports