New AI-driven malware feeds stolen data to Claude to rank victims' assets

Cisco Talos reports a self-deleting Windows infostealer called VOLTA-AUTODOXER that steals browser passwords, cookies, payment cards, email profiles, OAuth tokens, SSH and cloud configs, Wi-Fi passwords and more, then builds an "evidence bundle" on the victim and asks Anthropic's Claude by default to rank their valuables by cash-out potential. The malware prompts the model to act as a "forensic intelligence analyst" and be "blunt, specific, accurate," and can switch models if one refuses or operate without one. It also attempts to crack cryptocurrency wallet vaults inline and compiles geolocation, employer, inferred birth year, document metadata and card digits.