{
  "name": "New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms",
  "slug": "new-noodlophile-stealer-distributes-via-fake-ai-video-generation-platforms",
  "description": "As artificial intelligence (AI) surges into mainstream adoption, millions of users turn daily to AI-powered tools for content creation\u2014from generating art and music to transforming photos into videos. But amid this excitement, cybercriminals have uncovered a potent new lure: fake AI platforms promising cutting-edge content generation in exchange for user uploads.",
  "published": "2025-05-12T15:47:52+00:00",
  "created_at": "2025-05-12T15:47:52+00:00",
  "modified_at": "2025-05-12T15:53:34+00:00",
  "created_at_opencti": "2025-05-12T15:47:52+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-05-12",
    "ai",
    "capcutloader",
    "credential-theft",
    "facebook",
    "infostealer",
    "morphisec",
    "noodlophile",
    "python",
    "remote access",
    "video dream",
    "word document",
    "worm",
    "xworm"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "85.209.87.207"
      },
      {
        "id": "",
        "name": "160.25.232.62"
      },
      {
        "id": "",
        "name": "103.232.54.13"
      },
      {
        "id": "",
        "name": "https://luma-dreammachine.com/LumaAI.zip"
      },
      {
        "id": "",
        "name": "https://luma-dreammachine.com/File_Successful.zip"
      },
      {
        "id": "",
        "name": "https://luma-aidreammachine.com/Creation_Luma.zip"
      },
      {
        "id": "",
        "name": "https://85.209.87.207/sysdi/randomuser2025.txt."
      },
      {
        "id": "",
        "name": "https://85.209.87.207/sysdi/randomuser2025.txt"
      },
      {
        "id": "",
        "name": "https://85.209.87.207/sysdi/LDXC10.txt"
      },
      {
        "id": "",
        "name": "http://lumalabs-dream.com/VideoLumaAI.zip"
      },
      {
        "id": "",
        "name": "http://160.25.232.62/bee/bee02_ads.txt"
      },
      {
        "id": "",
        "name": "http://103.232.54.13:25902"
      },
      {
        "id": "",
        "name": "fa0c8f439db570b4206f7c8be497cf91aaf28e41eaffdc70baef904b190387ef"
      },
      {
        "id": "",
        "name": "f9a8b13c56d1074beed40de97920beef2e39086591e961c2c45e25fdd16b4786"
      },
      {
        "id": "",
        "name": "ecf0f68e8cd4683f0bb0e11b575ee2c31ff559abcea8823c54d86fc4b36fd83f"
      },
      {
        "id": "",
        "name": "e2c8eaf77dca9ed188f12261b9e9052ba0e58d1b9c45d922cbf0f3d00611ea56"
      },
      {
        "id": "",
        "name": "dc3e9daf25c44eb5d3ad12aa668c6219e8e7031152e1d7d51ee0b889c37ba443"
      },
      {
        "id": "",
        "name": "c612a70e6a5c211d888f6032143e8ba8c70c15a5e1ebf17ab59146eb7fb707f1"
      },
      {
        "id": "",
        "name": "97927fdaaa8c55ac7c85ae6087a1ea637bb0e43148b3759740eaa75b64c459b2"
      },
      {
        "id": "",
        "name": "c006c6dddb9bfcdbf2790eee4bc77dd09cd63ab5b8e64190a55b9e5b66325d55"
      },
      {
        "id": "",
        "name": "934a68ac125cf995662bdd2d76a1d8dd3f107010ce77e21f003ebc581dc025d3"
      },
      {
        "id": "",
        "name": "8b0ee435928189c98969825e729a014e94b90e1da3af3cfeee1d02374c2bd906"
      },
      {
        "id": "",
        "name": "86d6dd979f6c318b42e01849a4a498a6aaeaaaf3d9a97708f09e6d38ce875daa"
      },
      {
        "id": "",
        "name": "82c0d5c4c405739aee74b792dccd7c821a9f06a0f6e389ad57a321adcc6757a7"
      },
      {
        "id": "",
        "name": "67779bf7a2fa8838793b31a886125e157f4659cda9f2a491d9a7acb4defbfdf5"
      },
      {
        "id": "",
        "name": "6c32460510925289421d1c7af986e00e9ada459f56a423d8b65d6cc57ed053c7"
      },
      {
        "id": "",
        "name": "5c98553c45c9e86bf161c7b5060bd40ba5f4f11d5672ce36cd2f30e8c7016424"
      },
      {
        "id": "",
        "name": "353f17553a3457c6b77c4ca30505d9307dda9613e2a98ad3e392d2084284b739"
      },
      {
        "id": "",
        "name": "32174d8ab67ab0d9a8f82b58ccd13ff7bc44795cca146e61278c60a362cd9e15"
      },
      {
        "id": "",
        "name": "286076a09f524cc7015f23fb63515b3a30cee070fbc13fbb6f8e9cb1e5ced2ce"
      },
      {
        "id": "",
        "name": "18c14dcfb9a54c5359026a5fcbdb3e4ba6ced2628a9cd9ae589baedbb29beaa6"
      },
      {
        "id": "",
        "name": "11c873cee11fd1d183351c9cdf233cf9b29e28f5e71267c2cb1f373a564c6a73"
      }
    ],
    "malware": [
      {
        "id": "82e2ea8e-729a-4648-ba23-3a792f53fa15",
        "name": "XWorm",
        "slug": "xworm"
      }
    ],
    "attack_patterns": [
      {
        "id": "df7b69c8-916a-4f71-a053-b1a5684439db",
        "name": "T1503"
      },
      {
        "id": "b7c6c1ad-f183-4128-8427-3891029c73dc",
        "name": "T1539"
      },
      {
        "id": "c3af9fd7-d307-4df4-9220-cc627938fb85",
        "name": "T1055"
      },
      {
        "id": "7d7ac733-6442-416f-8669-c302dd0843b9",
        "name": "T1036"
      },
      {
        "id": "50514c04-b3a2-4abf-a855-e3a434200c87",
        "name": "T1204"
      },
      {
        "id": "fa3b8b48-d97c-4242-83a6-07d435a5a79e",
        "name": "T1041"
      }
    ]
  },
  "external_refs": [
    "https://www.morphisec.com/blog/new-noodlophile-stealer-fake-ai-video-generation-platforms/",
    "https://otx.alienvault.com/pulse/682234494e60523c62b4e695"
  ]
}