Arkanix Stealer: AI-Assisted Info-Stealer Experiment
Summary
Hide ▲
Show ▼
Arkanix Stealer, an AI-assisted information-stealing malware, was promoted on dark web forums in late 2025 but was shut down two months later. The malware offered standard data-stealing features, a modular architecture, and anti-analysis capabilities. Kaspersky researchers found evidence of LLM-assisted development, suggesting reduced development time and costs. The stealer targeted browser data, cryptocurrency wallets, VPN credentials, and more, with a premium version offering advanced features like RDP credential theft and anti-sandbox checks. The project's purpose remains unclear, but it may have been an experiment to assess LLM assistance in malware development.
Timeline
-
22.02.2026 17:33 1 articles · 1h ago
Arkanix Stealer Shut Down After Two Months
Arkanix Stealer, an AI-assisted information-stealing malware, was promoted on dark web forums in October 2025 and shut down two months later. The malware offered standard data-stealing features, a modular architecture, and anti-analysis capabilities. Kaspersky researchers found evidence of LLM-assisted development, suggesting reduced development time and costs. The stealer targeted browser data, cryptocurrency wallets, VPN credentials, and more, with a premium version offering advanced features like RDP credential theft and anti-sandbox checks.
Show sources
- Arkanix Stealer pops up as short-lived AI info-stealer experiment — www.bleepingcomputer.com — 22.02.2026 17:33
Information Snippets
-
Arkanix Stealer was promoted on dark web forums in October 2025 and shut down two months later.
First reported: 22.02.2026 17:331 source, 1 articleShow sources
- Arkanix Stealer pops up as short-lived AI info-stealer experiment — www.bleepingcomputer.com — 22.02.2026 17:33
-
The malware offered standard data-stealing features, a modular architecture, and anti-analysis capabilities.
First reported: 22.02.2026 17:331 source, 1 articleShow sources
- Arkanix Stealer pops up as short-lived AI info-stealer experiment — www.bleepingcomputer.com — 22.02.2026 17:33
-
Kaspersky researchers found evidence of LLM-assisted development, reducing development time and costs.
First reported: 22.02.2026 17:331 source, 1 articleShow sources
- Arkanix Stealer pops up as short-lived AI info-stealer experiment — www.bleepingcomputer.com — 22.02.2026 17:33
-
Arkanix targeted browser data, cryptocurrency wallets, VPN credentials, and more.
First reported: 22.02.2026 17:331 source, 1 articleShow sources
- Arkanix Stealer pops up as short-lived AI info-stealer experiment — www.bleepingcomputer.com — 22.02.2026 17:33
-
The premium version offered advanced features like RDP credential theft and anti-sandbox checks.
First reported: 22.02.2026 17:331 source, 1 articleShow sources
- Arkanix Stealer pops up as short-lived AI info-stealer experiment — www.bleepingcomputer.com — 22.02.2026 17:33
-
The project's purpose remains unclear, possibly an experiment to assess LLM assistance in malware development.
First reported: 22.02.2026 17:331 source, 1 articleShow sources
- Arkanix Stealer pops up as short-lived AI info-stealer experiment — www.bleepingcomputer.com — 22.02.2026 17:33