Cisco Talos finds an infostealer that asks an AI model to rank each victim by how much they're worth
Talos quotes the malware's own prompt and shows how it switches models when one refuses.
Cisco Talos describes VOLTA, a self-deleting Windows infostealer that, after taking browser passwords, cookies, payment cards, crypto wallet phrases, chat and gaming sessions, and cloud keys, builds a profile of the victim and sends it to a large language model through OpenRouter. The prompt tells the model to act as "a forensic intelligence analyst drafting a target assessment," with sections on what the victim is worth and how weak their security habits are.
Talos says the malware uses stolen sessions to enrich the profile, for example by searching the victim's Gmail for receipts to confirm a home address and pulling food-delivery order history. Its default model is Anthropic's Claude Opus 4.6; if a response contains refusal phrases such as "I can't," it falls back to Moonshot's Kimi K2 and then Google's Gemini 2.5 Flash, which Talos reads as the author expecting guardrails.
Talos's point: the AI is not writing malware here but doing the criminal's triage, turning a raw credential dump into a prioritized dossier.
-
Infostealer
After exploring Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer, the kind of malware this is is explained in Infostealer.
An infostealer is malware that scans a computer for personal data such as logins and financial details and sends it to the attacker, who often sells it on darknet markets.
Wikipedia · Wade · 5 min
0