New AI malware ranks victims by how much they're worth

What happened: Researchers at Cisco Talos uncovered a Windows malware strain called VOLTA-AUTODOXER that steals data and uses AI to profile victims and rank their assets by potential value. Key numbers: The malware uses Anthropic's Claude as its default AI model, with fallbacks to Moonshot AI's Kimi K2 and Google's Gemini 2.5 Flash. Why it matters: The malware can sort stolen accounts by likely profit and assess victims' security habits, though researchers have not established that criminals have used these rankings to select real-world targets.

Researchers at Cisco Talos uncovered a Windows malware strain called VOLTA-AUTODOXER that steals data and uses AI to profile victims and rank their assets by potential value.

The malware can sort stolen accounts by likely profit and assess victims' security habits, though researchers have not established that criminals have used these rankings to select real-world targets.