Ai-powered malware expands cybercrime capabilities with targeted data analysis

New research reveals that hackers are integrating AI into a novel infostealer malware called 'Volta-Autodoxer,' enabling it to automatically profile victims and prioritize high-value targets. The malware, identified by Cisco Talos researchers, uses commercial LLMs to analyze stolen data, creating structured assessments of victims. Ryan Fetterman, a security researcher at Cisco Talos, explained that Volta compiles collected data into a dossier and sends it to AI models like Anthropic’s Claude Opus 4.6, with fallbacks to Moonshot AI and Google’s Gemini 2.5 Flash. The malware also includes a 240-word prompt instructing the AI to generate an executive summary of the victim’s digital footprint, including their value and operational security. Fetterman noted that while the AI features are optional, they significantly enhance the malware’s capabilities, allowing attackers to identify targets more efficiently. The malware targets younger internet users, collecting data from multiple platforms and using AI to cross-reference information from services like UberEats and DoorDash. Researchers warn that this AI integration marks a shift toward more invasive cybercrime tactics, accessible to a broader range of attackers.