# A new infostealer sends what it steals to an AI model to rank victims by how much they're worth.

> Cisco Talos found a Windows infostealer, VOLTA, that sends what it steals to an AI model to rank what each victim is worth.

Published 2026-10-31T12:18:07-07:00 · News · Canonical: https://news.littlewolflabs.com/posts/2026-10-31-volta-ai-infostealer

Security researchers at Cisco Talos have found a Windows infostealer, malware that grabs saved passwords, browser cookies, payment cards, crypto wallets and logged-in sessions, that adds an AI step after the theft ([Cisco Talos](https://blog.talosintelligence.com/appraisal-by-ai-model-driven-victim-prioritization-in-the-volta-infostealer/)). The malware, which calls itself "VOLTA-AUTODOXER," builds a profile of the person behind the computer, including their home address, employer and accounts. It then uses the stolen sessions to dig further, for example searching the victim's Gmail for receipts to confirm where they live and pulling Uber Eats and DoorDash order history. It sends that bundle through OpenRouter, a service that routes requests to many AI models, with instructions to write a "target assessment" that ranks what the victim is "worth" and judges their security habits. It tries Anthropic's Claude Opus 4.6 first, and if the reply looks like a refusal, it falls back to Moonshot's Kimi K2 and then Google's Gemini 2.5 Flash. The malware still works if the AI step fails. Talos says the code looks like it's built to be sold to other criminals, and it told [WIRED](https://www.wired.com/story/kernel-panic-volta-autodoxer-ai-infostealer-malware/) it did not track whether VOLTA has been used in the wild.

*What this means for you:* the AI part doesn't change how you get infected. Infostealers are often hidden in counterfeit software, so be careful about where you download programs from. If you think a machine was hit, Talos says to revoke your logged-in sessions and tokens and change your passwords, and to treat any crypto wallet whose seed phrase was saved in plain text on that machine as fully compromised.