AI-Augmented Infostealer 'Volta-Autodoxer' Targets High-Value Victims

Cisco Talos researchers have identified a new infostealer malware strain called 'Volta-Autodoxer' that integrates large language models to automate victim profiling. The malware collects sensitive data such as passwords, cookies, and session tokens, then sends this information to commercial AI providers like Anthropic and Google via the OpenRouter API. It uses these models to generate structured assessments of victims, prioritizing high-value targets for credential stuffing or account takeover. While the core theft mechanism is traditional, the AI layer automates the analysis phase, making attacks more efficient and accessible to less sophisticated threat actors.