A fake AI trading agent installs Needle Stealer, which swaps browser crypto wallets for fake copies that send wallet passwords to attackers.