Kynx Stealer Targets AI Dev Tools and Crypto Wallets in New Campaign

TechNadu · x · 2026-08-10

Security firm SOCRadar has uncovered a new malware strain dubbed Kynx Stealer. Beyond standard browser passwords, the trojan specifically targets 65 crypto wallet extensions and 16 gaming platforms.

Notably, Kynx focuses on AI and developer tools, aiming at credentials for Claude, Cursor, ChatGPT, Copilot, Codex, and Windsurf. Technical analysis reveals it employs a four-method extraction chain to steal session cookies, Discord tokens, VPN configs, and seed-phrase files. The malware also features anti-VM checks, and its developer reportedly used Gemini to assist in its creation.

Related event: Kynx Stealer Malware Targets Crypto Wallets and AI Tools(2 posts)→

Original post →

More from Safety

Safety channel →