tech
Volta-Autodoxer Infostealer Uses AI to Profile Victims and Find High-Value Targets
Hackers add AI to Volta-Autodoxer infostealer to profile victims and find high-value targets, Cisco Talos finds.
Key points
- Cisco Talos researchers flagged the Volta-Autodoxer malware using the firm's new CAIRN framework.
- Volta's creators wrote a 240-word prompt asking LLMs to produce target assessments of victims.
- Fetterman said Talos did not track whether Volta has been used in the wild.
Why it matters. The findings show how commercial LLMs may be used to augment established infostealer malware, and attackers may rely on fallback models to get past refusals.
Cisco Talos researchers reported that hackers have added AI functionality to a new infostealer strain, dubbed Volta-Autodoxer, that automatically profiles victims and surfaces high-value targets. The malware first sweeps browsers for passwords, Microsoft OAuth tokens, cookies, payment cards and crypto wallet seed phrases, plus active Discord, Telegram, Steam and Roblox sessions.
Latest updates
Volta-Autodoxer Infostealer Uses AI to Profile Victims and Find High-Value Targets
A newly uncovered infostealer malware, named Volta-Autodoxer, uses AI tools to gather large amounts of personal data from victims. The data includes login credentials, credit card numbers, Discord sessions and UberEats receipts. New research shared exclusively with Kernel Panic shows hackers have added AI functionality to a new strain of infostealer. The AI component can automatically profile victims and quickly identify the highest-value targets and their information. The malware is described as dubbed Volta-Autodoxer, and the research highlights how AI can speed up data theft at scale. Further details of the campaign's reach were not included in the source.