Cisco Talos finds Volta-Autodoxer infostealer that uses commercial LLMs to profile victims
Overview
Cisco Talos researchers report Volta-Autodoxer, an infostealer that sends stolen victim data to commercial large language models for profiling.
According to Talos, the malware defaults to Anthropic's Claude Opus 4.6 and falls back to Kimi K2 and Gemini 2.5 Flash when a model refuses a request. Talos did not determine whether Volta-Autodoxer has been used in actual attacks.
Written by AI from the articles below · updated Oct 31, 9:04 AM ET
Check the sources:
Article timeline
The articles in this story. Times are ET.
- Wired · AINewsSpooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
AICisco Talos researchers found infostealer malware called Volta-Autodoxer that sends stolen victim data to commercial LLMs for profiling. The malware defaults to Anthropic's Claude Opus 4.6 and falls back to Kimi K2 and Gemini 2.5 Flash if refusals occur. Talos did not track whether Volta has been used in the wild.
Heat Trend
Not enough continuous observations to show a trend yet.