Cisco Talos Says Malware Now Asks an AI to Rank What Each Victim Is Worth
In an analysis published Oct. 31, 2026, Cisco Talos describes a Windows program that steals passwords, browser sessions and cryptocurrency wallets, then sends a profile of its victim to a commercial AI model and gets back a ranking of what the victim's accounts are worth. Talos worked from one sample, identified by hash, that names itself VOLTA-AUTODOXER and that Talos first saw Oct. 11, 2026.
Talos says the AI stage was added for one purpose: to relieve the operator of analytical work. The model acts as the operator's triage analyst, sorting a raw credential log into what is worth pursuing.
The report says the program takes the usual haul of passwords, payment cards, wallet seed phrases and chat sessions, then builds a file on the person behind the machine, down to their employer and birth year. Talos's analysis of the sample says that file goes to OpenRouter, a commercial service that forwards requests to many AI models. The transfer happens under a system prompt telling the model to act as a forensic intelligence analyst drafting a target assessment. The reply ranks the victim's valuables low, medium or high.
Talos reports that the request is hardcoded to one default model with a fallback chain of up to three. The program checks each reply for refusal phrases and moves down the chain when it meets one, which Talos reads as the operator expecting refusals.
Talos says the binary carries its settings in a template with six slots filled in at build time, and reads that as a product sold to customers rather than a one-person tool. Every endpoint it observed is third-party, with no attacker-owned infrastructure, and the main executable deletes itself.
Talos calls this the same pattern as its earlier reports on NIK C2 and CLOSEDQUORUM: replace the step that takes the most sustained human attention with a model call.
Talos recommends limiting by policy which processes may start Chrome, keeping credentials in hardware-backed stores and revoking tokens that may be compromised. Where a wallet seed phrase sat unencrypted on disk, it says to move the funds to a wallet generated offline.
