Cisco Talos has identified a novel Windows infostealer that transmits exfiltrated data to an artificial intelligence model, prompting it to categorize the compromised victim's assets based on their potential monetary yield.
This malware, designated VOLTA-AUTODOXER, was discovered via Talos’ CAIRN resource, and its presence was initially documented in a publication on Help Net Security. Ryan Fetterman, a security researcher employed by Cisco, remarked, "There is a new idea in the cybercrime world — cast a wide net, steal everything, and let AI sort out the specifics."
This development signifies a shift in operational methodology among malicious actors, moving toward automated prioritization of high-value targets within a broad data collection effort.
Why it matters
This development signals an evolution in cybercrime tactics, shifting from broad data theft to targeted, profit-driven extraction. Operators must now consider how AI is being weaponized to prioritize and monetize compromised infrastructure and data.
