New malware uses AI chatbots to profile and rank its victims (opens the source in a new tab)
- Cisco Talos found an infostealer, dubbed Volta-Autodoxer, that grabs passwords, tokens, cookies, cards, crypto seed phrases and gaming and chat sessions, then digs through email for receipts and order history.
- It bundles the haul into a dossier and asks an AI model for an analyst-style assessment of the victim, to rank who is worth targeting first. If a model refuses, it falls back to more permissive ones.
- Talos did not track whether it has been used in the wild, and the malware works without the AI step. Clues suggest it was built for sale to many attackers.
Why it matters Stolen tokens expire and passwords get changed; AI triage helps attackers cash in on the best targets first. It puts advanced tradecraft in low-skill hands.
Other side The AI layer is an add-on to an ordinary stealer, and its first-choice model may refuse. Basic habits, like not saving passwords in browsers, still blunt the core attack.