Rank #24 of 48·Security·31 Oct 2026·VOLTA-AUTODOXER infostealer calling Anthropic's Claude Opus 4.6 via OpenRouter (fallbacks: Moonshot Kimi K2, Google Gemini 2.5 Flash)

New Windows malware hands its stolen haul to Claude and asks what the victim is worth

Illustration of malware uploading stolen files to an AI chat; not a real screenshot of VOLTA. AI-generated illustration; text overlaid.

“It steals your life, then asks an AI for a valuation.”

Incident reportSecurityInfected Windows PCs; the AI call goes through OpenRouter over the victim's own connection

Agent / toolVOLTA-AUTODOXER infostealer calling Anthropic's Claude Opus 4.6 via OpenRouter (fallbacks: Moonshot Kimi K2, Google Gemini 2.5 Flash)

CompanyCisco Talos (research); Anthropic's Claude Opus 4.6 is the malware's default model

DamageOne AI-written dossier per victim, ranked by 'WHAT THEY'RE WORTH'; 3 models in its refusal fallback chain

Time to detectSample first seen 11 Oct 2026; analysis published 31 Oct 2026

StatusDisclosed by Cisco Talos; Talos did not track whether it has been used in the wild

Chaos7.0 / 10

VOLTA-AUTODOXER steals passwords, cookies, cards, crypto wallets, app sessions, SSH and cloud keys and saved Wi-Fi passwords, then deletes itself
It searches the victim's Gmail for receipts to confirm a home address and pulls Uber Eats and DoorDash order history
The bundle goes to an AI model via OpenRouter with a prompt asking for a 'target assessment' with a 'WHAT THEY'RE WORTH' section
Claude Opus 4.6 is the default; if it refuses, VOLTA falls back to Kimi K2, then Gemini 2.5 Flash, and it works without AI too
Talos thinks it's sold through a builder and didn't track whether it has been used in the wild

Most malware steals everything and leaves a human to sort through it later. VOLTA hands that job to an AI model, and it comes with backups in case the AI says no.

What happened

Cisco Talos researchers say VOLTA-AUTODOXER, a self-deleting Windows infostealer, grabs browser passwords, cookies, payment cards, crypto wallet seed phrases, Discord, Telegram, Steam and Roblox sessions, SSH and cloud keys and every saved Wi-Fi password. Then it uses the stolen sessions to dig deeper: it searches the victim's Gmail for receipts to confirm a home address and pulls Uber Eats and DoorDash order history. The bundle goes to OpenRouter with a prompt telling the model to act as "a forensic intelligence analyst drafting a target assessment", including a section headed "WHAT THEY'RE WORTH".

The damage

The default model is Anthropic's Claude Opus 4.6. If a reply contains phrases like "I can't", VOLTA moves on to Moonshot's Kimi K2, then Google's Gemini 2.5 Flash, and it still works with no AI at all. The AI call runs over the victim's own connection, and the dossier leaves in a zip file with the stolen data. Talos says it didn't track whether VOLTA has been used in the wild.

How it was caught, and what happened next

Talos thinks VOLTA is sold through a builder, so any buyer could get ranked victim dossiers. Its advice: alert on Chrome launched headless by unknown processes, keep the volta_debug.txt log if you're hit, and rotate every token and password.

Lesson for builders

A model that refuses is a speed bump, not a wall: attackers now plan for the 'no' and route around it.