{"type":"post","id":"cisco-talos-details-volta-infostealer-that-sends-stolen-225e2d","slug":"cisco-talos-details-volta-infostealer-that-sends-stolen-225e2d","title":"Cisco Talos details VOLTA infostealer that sends stolen victim dossiers to LLMs via OpenRouter for ranking","description":"Cisco Talos describes VOLTA-AUTODOXER, a Windows infostealer that sends a structured dossier assembled from stolen and enriched victim data to an LLM through OpenRouter.","retrieval_nugget":"Cisco Talos describes VOLTA-AUTODOXER, a Windows infostealer that sends a structured dossier assembled from stolen and enriched victim data to an LLM through OpenRouter. The model ranks assets by monetization value and assesses the victim’s security posture. The case shows how generative AI can turn credential theft into targeted criminal triage.","published_at":"2026-10-31","updated_at":"2026-10-31","record_date":"2026-10-31","date_kind":"published_at","topics":["claude","gemini"],"entities":["Cisco Talos","VOLTA-AUTODOXER","OpenRouter","Claude Opus 4.6","Kimi K2","Gemini 2.5 Flash"],"related_patterns":[],"novelty_label":"new_fact","what_changed":"Cisco Talos reports VOLTA’s LLM-based victim profiling and asset ranking, a distinct malware-analysis finding not covered by the archive documents.","prior_refs":[],"source_url":"https://blog.talosintelligence.com/appraisal-by-ai-model-driven-victim-prioritization-in-the-volta-infostealer","source_urls":["https://blog.talosintelligence.com/appraisal-by-ai-model-driven-victim-prioritization-in-the-volta-infostealer"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:cisco-talos-details-volta-infostealer-that-sends-stolen-225e2d","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/cisco-talos-details-volta-infostealer-that-sends-stolen-225e2d/","markdown":"https://newruntime.com/posts/cisco-talos-details-volta-infostealer-that-sends-stolen-225e2d.md","json":"https://newruntime.com/posts/cisco-talos-details-volta-infostealer-that-sends-stolen-225e2d.json"},"next_reads":[{"type":"topic","path":"/topics/claude/","url":"https://newruntime.com/topics/claude/","title":"Claude","reason":"Explore the claude topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude.md","json_url":"https://newruntime.com/topics/claude.json"},{"type":"topic","path":"/topics/gemini/","url":"https://newruntime.com/topics/gemini/","title":"Gemini","reason":"Explore the gemini topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/gemini.md","json_url":"https://newruntime.com/topics/gemini.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}