New AI malware ranks victims by how much they’re worth

Researchers say VOLTA-AUTODOXER is a Windows malware strain that steals personal information and can use AI to assess which victims may be most profitable to target. The approach matters because it could help criminals prioritise stolen accounts, while everyday digital records may reveal details about someone’s identity and home.

Cisco Talos researchers found that the malware can collect browser passwords, payment card details, login sessions, cryptocurrency wallet data, work credentials, Wi-Fi passwords and screenshots. It can also search email and food delivery or shopping records, including Uber Eats, DoorDash, Amazon and PayPal receipts, for clues such as a victim’s address, employer or age. The AI analysis runs through OpenRouter and is optional, so data theft can continue even if that step fails.