New infostealer VOLTA-AUTODOXER ranks stolen data by AI profitability
Original title: AI-powered infostealer picks out the most profitable parts of your stolen data
The malware sends a structured bundle of victim data to AI models which rank assets by monetization potential and assess security habits.
A new Windows infostealer called VOLTA-AUTODOXER steals browser passwords, cookies, payment cards, crypto wallet seeds, OAuth tokens, SSH keys, screenshots and Discord/Telegram/Steam/Roblox sessions. It then sends this data plus geolocation, home address, employer and other details to AI models for analysis and ranking. The malware deletes itself after execution and exfils the AI-generated target assessment.
Unconfirmed: Whether VOLTA-AUTODOXER is actively exploited in the wild is unconfirmed
- VOLTA builds a structured evidence bundle with inferred birth year, Wi-Fi passwords and document metadata
- It uses stolen sessions to enrich data with Gmail receipts and Uber Eats history
- The AI prompt requires ranking valuables as low/medium/high and checking password hygiene
- VOLTA is a builder model sold with configurable Telegram channel and API keys
- Fallbacks to Moonshot Kimi K2 and Google Gemini 2.5 Flash if Claude Opus 4.6 refuses
Impact: Attacker gains AI-ranked target assessments and enriched victim profiles for monetization
| Product | Affected |
|---|---|
| Windows endpoints | — |
- Vendors
- Cisco
- Products
- Windows
- Malware
- VOLTA-AUTODOXER
From the original article
3 min read at helpnetsecurity.com
A new Windows infostealer sends the data it steals to an AI model and asks it to rank the victim’s assets by how much money they could bring in, Cisco Talos has found. “There is a new idea in the cybercrime world — cast a wide net, steal everything, and let AI sort out the specifics,” said Ryan Fetterman, a security researcher at Cisco. The malware calls itself VOLTA-AUTODOXER and turned up through Talos’ CAIRN …
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.