# Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims

- URL: https://talkfuse.com/story/spooky-new-infostealer-malware-uses-ai-to-autodox-victims/
- Published: 2026-10-31T12:00:00+00:00
- Updated: 2026-10-31T12:49:52+00:00
- Original publisher: Wired
- Original article: https://www.wired.com/story/kernel-panic-volta-autodoxer-ai-infostealer-malware/
- Topics: AI, Cybersecurity, Technology

## Key points

- Volta uses AI to analyse data stolen from infected devices.
- It builds victim profiles from accounts, purchases and online sessions.
- Talos has not established whether it has been used in the wild.

## Summary

Cisco Talos researchers have identified Volta-Autodoxer, an infostealer that sends information gathered from infected devices to large language models for analysis. The AI is prompted to profile victims, assess their likely value and organise evidence, helping attackers prioritise targets; Talos says it has not tracked whether the malware has been used in the wild.

Volta can collect browser passwords, authentication tokens, cookies, payment card details, crypto wallet seed phrases and active sessions from services including Discord, Telegram, Steam and Roblox. It then searches central accounts such as Gmail for further clues, including location and habits, before sending a dossier through OpenRouter, which can route requests to several AI providers. The malware defaults to Claude Opus 4.6, with Kimi K2 and Gemini 2.5 Flash as fallbacks, and can still operate without AI analysis.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.