logo

AI-powered infostealer picks out the most profitable parts of your stolen data

ID: 1c4c7c7c-9225-5b07-a073-35d4b3957e49

STIX ID: report--1c4c7c7c-9225-5b07-a073-35d4b3957e49

Feed Name: Help Net Security

Threat Score
75/100

Date Published: 2026-11-02

Date Updated: 2026-11-02

Author: Sinisa Markovic

...
...

Cisco Talos found a Windows infostealer named VOLTA-AUTODOXER that collects passwords, cookies, payment cards, crypto seeds, tokens, screenshots and other personal and account data, enriches it (e.g., receipts, order history, geolocation), assembles an 'Identity_Report.txt' and posts the JSON bundle to AI model APIs to have the model rank and categorize valuables for monetization; the binary appears to be produced by a builder model for buyers, deletes itself after execution, and uses third-party infrastructure with multi-model fallbacks to avoid refusals and takedowns.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.