Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
wired ·
Researchers at Cisco Talos have uncovered a new strain of infostealer malware named Volta-Autodoxer that integrates artificial intelligence to enhance its data theft capabilities. The malware collects extensive personal information, including login credentials, credit card numbers, and session tokens from platforms like Discord and Steam. It performs a secondary sweep to gather deeper insights into victims' habits by analyzing receipts from services such as UberEats and DoorDash. Once collected, this data is fed into large language models via OpenRouter to generate structured assessments of the victim's value and security posture. The system defaults to Anthropic’s Claude but includes fallbacks to other AI providers if guardrails block the requests. This automation allows attackers to quickly prioritize high-value targets without manual analysis. Although the core malware functions independently, the AI component significantly streamlines the identification of lucrative victims. Security experts warn that this trend makes advanced targeting techniques accessible to less sophisticated cybercriminals.
wired