AnalysisCybersecurityOctober 31, 2026

Volta infostealer uses LLMs to rank victims by value

Read original source →blog.talosintelligence.com

Cisco Talos found the self-named "VOLTA-AUTODOXER" Windows stealer bundles stolen credentials, crypto seeds, and sessions, then POSTs a dossier to OpenRouter asking a model to act as a "forensic intelligence analyst." If a model refuses, it fails over to a three-model chain.

2 sources

More stories today

Open the live feed