# Volta malware adds AI analysis to profile victims and prioritize targets

_Published Saturday, October 31, 2026 at 9:06 AM EDT · Security, AI · Latest · Tier 2 — Notable_

![Volta malware adds AI analysis to profile victims and prioritize targets — Primary](https://media.wired.com/photos/6ae4e9f503c2c36f4cfc913c/191:100/w_1280,c_limit/KernelPanic_10312026_v1.jpg)

Cisco Talos researchers have identified an infostealer called Volta-Autodoxer that sends stolen information to language models to build victim assessments, WIRED reports. The malware collects credentials, authentication tokens, payment information and account sessions, then examines central accounts such as Gmail for further details about victims' locations and habits.

It uses OpenRouter to request analysis, defaulting to Claude Opus 4.6 with fallbacks to Kimi K2 and Gemini 2.5 Flash. The assessments seek details about victims' activities, wealth and security practices. Talos did not track whether Volta has been used in the wild, and its credential-stealing functions work without AI.

## Sources

- [WIRED](https://www.wired.com/story/kernel-panic-volta-autodoxer-ai-infostealer-malware/)

---
Canonical: https://techandbusiness.org/newswire/cgzuJK_gE3w5FxwOv4GRez
Published: 2026-10-31T13:06:17.208Z
Story chronology: 2026-10-31T12:00:00.000Z
Retrieved: 2026-10-31T15:31:37.805Z
Publisher: Tech & Business (techandbusiness.org)