New AI-driven malware feeds stolen data to Claude to rank victims' assets
Cisco Talos reported VOLTA-AUTODOXER, a self-deleting Windows infostealer that steals browser passwords, cookies, payment cards, tokens and other data, then bundles it into a structured evidence file. It sends that file through OpenRouter to Claude Opus 4.6, which produces a target assessment ranking the victim's assets by monetizable value, falling back to Kimi K2 or Gemini 2.5 Flash if refused, or to Telegram if no API key is supplied. This matters because it turns bulk credential theft into AI-assisted triage, letting attackers prioritize the most valuable victims instead of sifting through stolen data themselves.
SOURCES
- Hacker News (AI)2026-11-02 02:17