Security researchers have discovered VOLTA-AUTODOXER, a new Windows infostealer that uses large language models to analyze stolen data.
The malware harvests credentials, session tokens, and crypto keys, then employs models via OpenRouter to rank the victim's financial worth before exfiltration.
The program, known as VOLTA, infiltrates computers and collects massive amounts of personal data. Specifically, it can steal saved passwords, digital browsing traces, payment details, digital cryptocurrency wallets, and login profiles from various applications.
How stolen data is organized
After collecting the data, the program searches the victim's emails for receipts from orders and purchases to confirm their home address. It then creates a folder with information that includes location, address, employer, card details, and an estimate of the value of the bills.
To process this data, the program connects to artificial intelligence services. It primarily uses the Claude system, while it has a mechanism for automatically switching to other systems, such as Kimi and Gemini, in case the first system refuses to respond. A special instruction text asks the artificial intelligence to act as an analyst, assessing the value of the victim and how careful he was with his safety.
How the data reaches the perpetrators
All data and analysis results are sent to the perpetrators via the Telegram application at three different stages of the process.
↳
READ ALSO
HACKS.GR / RELATED
Cyber Attacks & Data Breaches
Binance reopens withdrawals after $6,3 billion theft
↗
According to the researchers, the program has ready-made settings for channels and connection keys, which indicates that it is likely a custom-made tool or one sold to other scammers.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)