Many MindedInfostealer uses a commercial AI model to appraise victims' loot before it vanishes
Cisco Talos researchers have documented a Windows infostealer called VOLTA-AUTODOXER. After it takes data from a PC, it sends the haul to an AI model, Anthropic's Claude by default, and asks for a target assessment. The assessment ranks the victim's assets by how easily they can be turned into money. The prompt tells the model to act as a forensic intelligence analyst and be blunt, specific and accurate.
The theft is broad. It covers browser passwords, cookies, saved payment cards, Thunderbird and Outlook profiles, Roblox accounts, Microsoft OAuth tokens, screenshots, SSH and cloud config files, and every saved Wi-Fi password in plaintext. It tries to crack crypto wallet vaults on the spot. Using stolen sessions, it searches Gmail for receipts from services such as Amazon, DoorDash and PayPal to confirm the home address, and it values Roblox items through Rolimons. The dossier goes to OpenRouter over the victim's own connection. The reply and the report are zipped together and exfiltrated. The default is Claude Opus 4.6, with Kimi K2 and then Gemini 2.5 Flash as fallbacks if the model refuses or answers thinly. Without an API key, it can still send the dossier through Telegram, just without the analysis.
This moves security backward, and it touches goods too, since saved cards and marketplace accounts are the assets being valued. The AI step does not break into anything new. It removes the human labor of sorting stolen data, which makes small, low-value victims worth working through. VOLTA also looks built for resale. A template with six swappable slots is filled at build time, so the same tool can be customized for different buyers.
The caveats matter. The AI use is narrow compared with what fully AI-assisted malware could do, and Opus 4.6 is an older model, released in February. The main executable only "may" delete itself. Much of the token theft gets around Chrome's App-Bound Encryption by launching Chrome headless. An application-control policy limiting which processes can do that blocks this path, but not the other theft, the AI stage or exfiltration. Victims are advised to keep the volta_debug.txt log, rotate all keys and tokens, change passwords, and move wallet funds to a new seed generated on an air-gapped device if the seed was stored in plaintext.
Source: Tom's Hardware