PulseAugur
EN
LIVE 13:26:13

New malware uses Claude AI to rank victims' stolen assets

By PulseAugur Editorial · [2 sources] ·

A new strain of Windows malware, dubbed VOLTA-Autodoxer, has been discovered that leverages AI models to assess the value of stolen victim data. The malware first exfiltrates a wide range of personal information, including financial details, login credentials, and personal documents. It then sends this data to an AI model, by default Anthropic's Claude Opus 4.6, via OpenRouter to generate a ranked assessment of the victim's assets for potential monetization. The malware is designed to be adaptable, capable of switching to other AI models like Moonshot AI's Kimi K2 or Google's Gemini 2.5 Flash if the primary model refuses the request, or even proceeding without AI analysis if necessary. AI

IMPACT This development highlights the emerging threat of AI being weaponized for sophisticated cybercrime, potentially increasing the efficiency and impact of data theft and targeted attacks.

RANK_REASON This is a report on a new malware strain that uses AI capabilities, fitting the 'tool' category for AI-adjacent product news.

Read on Mastodon — mastodon.social →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

New malware uses Claude AI to rank victims' stolen assets

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
This is a report on a new malware strain that uses AI capabilities, fitting the 'tool' category for AI-adjacent product news.
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, other
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
1 days old
Coverage has settled into its steady-state source set.

Full methodology in our editorial standards.

COVERAGE [2]

  1. Tom's Hardware TIER_1 English(EN) · Shane Downing ·

    New AI-driven Windows malware feeds stolen data to Claude to rank victims’ assets by value, then deletes itself — payload builds custom target assessment, can switch models if one refuses, or skip the AI step entirely

    Cisco Talos says the VOLTA infostealer sends stolen victim data to Claude Opus 4.6 to rank assets by monetization value.

  2. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    New AI-driven Windows malware feeds stolen data to Claude to rank victims’ assets by value, then deletes itself — payload builds custom target assessment, can s

    New AI-driven Windows malware feeds stolen data to Claude to rank victims’ assets by value, then deletes itself — payload builds custom target assessment, can switch models if one refuses, or skip the AI step entirely Cisco Talos says the VOLTA infostealer sends stolen victim dat…

    LINKS tomshardware.com/…/new-ai-driven-windows-… tomshardware.com/tech-industry

RELATED ENTITIES

RELATED TOPICS