EN PT-BR
← Voltar ao feed
medium

VOLTA-AUTODOXER infostealer uses Claude, Kimi and Gemini via OpenRouter to rank victims by monetization value

1 fonte(s) · 1 atualização(ões) · publicado 02/11/2026 02:51 · coletado há 1 hora

Cisco Talos disclosed VOLTA-AUTODOXER (VOLTA), a Windows infostealer that uses an LLM to turn stolen data into a ranked dossier of each victim's monetizable assets. It harvests browser passwords and cookies, Outlook and Slack data, payment cards, crypto wallet seed phrases, Discord, Telegram, Steam and Roblox sessions, Microsoft OAuth tokens, SSH and cloud keys, Wi-Fi profiles and screenshots. The evidence bundle is sent through OpenRouter to Anthropic Claude Opus 4.6, with fallback to Moonshot AI Kimi K2 and Google Gemini 2.5 Flash. The output ranks valuables by monetization tier and assesses the victim's OPSEC. The article also covers NIK C2, an AI-enabled Go-based RAT that abuses the victim's own OpenAI API key (LLMjacking).

Detalhes técnicos

  • The bundle includes geolocation and home address, employer and domain, inferred birth year, card last-4 digits, Slack workspaces, document authorship metadata, iPhone backup indicators and a live Roblox account valuation.
  • Stolen session access is used to search the victim's Gmail for Amazon, DoorDash, Uber Eats, Grubhub, Walmart and PayPal receipts to corroborate the home address.
  • A 240-word system prompt casts the model as a "forensic intelligence analyst" and requires "WHAT THEY'RE WORTH" and "THEIR OPSEC" sections.
  • Refusals such as "I can't" or "I'm not able" trigger fallback to the next of up to three models.
  • Exfiltration runs over Telegram in three stages: right after the stealer runs, after the AI call (data plus analysis), and after live enrichment (Gmail receipts and order histories).
  • A six-slot build-time template holds the Telegram channel, API keys and other settings, suggesting a builder kit or bespoke per-order builds.
  • NIK C2 supports over 52 C2 commands, with remote access, credential theft, keylogging, defense evasion, surveillance and ransomware capabilities. It falls back to the victim's OPENAI_API_KEY environment variable when the actor supplies no key.
  • Zscaler ThreatLabz notes that GenAI can be used to search a compromised system for the most valuable data to steal or encrypt.

Remediação

The article gives no explicit guidance. Defenders should protect browser-stored credentials and session tokens, and avoid leaving API keys such as OPENAI_API_KEY in environment variables on endpoints.

Linha do tempo

  1. thehackernews.com ↗ · pub. 02/11/2026 02:51 · coletado 02/11 04:00 primeiro registro

    VOLTA-AUTODOXER infostealer uses Claude, Kimi and Gemini via OpenRouter to rank victims by monetization value

    ler a análise desta fonte

    Cisco Talos disclosed VOLTA-AUTODOXER (VOLTA), a Windows infostealer that uses an LLM to turn stolen data into a ranked dossier of each victim's monetizable assets. It harvests browser passwords and cookies, Outlook and Slack data, payment cards, crypto wallet seed phrases, Discord, Telegram, Steam and Roblox sessions, Microsoft OAuth tokens, SSH and cloud keys, Wi-Fi profiles and screenshots. The evidence bundle is sent through OpenRouter to Anthropic Claude Opus 4.6, with fallback to Moonshot AI Kimi K2 and Google Gemini 2.5 Flash. The output ranks valuables by monetization tier and assesses the victim's OPSEC. The article also covers NIK C2, an AI-enabled Go-based RAT that abuses the victim's own OpenAI API key (LLMjacking).

    Technical Details

    • The bundle includes geolocation and home address, employer and domain, inferred birth year, card last-4 digits, Slack workspaces, document authorship metadata, iPhone backup indicators and a live Roblox account valuation.
    • Stolen session access is used to search the victim's Gmail for Amazon, DoorDash, Uber Eats, Grubhub, Walmart and PayPal receipts to corroborate the home address.
    • A 240-word system prompt casts the model as a "forensic intelligence analyst" and requires "WHAT THEY'RE WORTH" and "THEIR OPSEC" sections.
    • Refusals such as "I can't" or "I'm not able" trigger fallback to the next of up to three models.
    • Exfiltration runs over Telegram in three stages: right after the stealer runs, after the AI call (data plus analysis), and after live enrichment (Gmail receipts and order histories).
    • A six-slot build-time template holds the Telegram channel, API keys and other settings, suggesting a builder kit or bespoke per-order builds.
    • NIK C2 supports over 52 C2 commands, with remote access, credential theft, keylogging, defense evasion, surveillance and ransomware capabilities. It falls back to the victim's OPENAI_API_KEY environment variable when the actor supplies no key.
    • Zscaler ThreatLabz notes that GenAI can be used to search a compromised system for the most valuable data to steal or encrypt.

    Remediation

    The article gives no explicit guidance. Defenders should protect browser-stored credentials and session tokens, and avoid leaving API keys such as OPENAI_API_KEY in environment variables on endpoints.