Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
This illustrates a practical way cybercriminals are integrating commercial LLMs with fallback routing to bypass model guardrails and automate the triage of stolen data.
Reported by Wired ·
What happened
Cisco Talos researchers identified a new infostealer malware dubbed "Volta-Autodoxer" that uses commercial language models via OpenRouter to automatically analyze stolen data and compile detailed dossiers on victims. The malware defaults to Anthropic's Claude Opus 4.6 to assess a target's net worth and operational security, with built-in fallbacks to Moonshot AI's Kimi K2 and Google's Gemini 2.5 Flash in case of safety refusals.
Who it’s about
- Cisco Talos
- OpenRouter
- Claude Opus 4.6
- Kimi K2
- Gemini 2.5 Flash
Source
More on security
Get a brief picked for you
Sign in to follow topics and companies, save stories and search the archive.
Sign in