IncidentsVOLTA infostealer uses Claude and Gemini to rank stolen data
Researchers say the new Windows malware sends harvested victim data to large language models to sort it by how much money it might fetch.
2 Nov 2026
VOLTA Infostealer Abuses Claude, Gemini, Kimi AI to Rank Stolen Data
Researchers identified a new Windows infostealer, VOLTA-AUTODOXER (VOLTA), that uses large language models including Claude, Gemini, and Kimi to rank stolen victim data by its financial monetization value, alongside harvesting browser passwords, cookies, Outlook and Slack data.
Disclosed 2 November 2026 · Record updated 2 November 2026
Impact
Malware operators leverage public AI model APIs to automatically triage and prioritize stolen victim data for financial exploitation, increasing the efficiency and reach of credential and data theft.
Our coverage
IncidentsSources
- thehackernews.comhttps://thehackernews.com/2026/11/new-volta-infostealer-uses-claude.html