VOLTA-AUTODOXER

I don't have verified information about a tag or entity called "VOLTA-AUTODOXER" in AI governance, and I don't want to invent a description that could mislead compliance or risk readers. It may be an internal project name, a vendor product, or a term I'm not familiar with. If you can share a source, such as a vendor page, regulatory filing, or news article, or tell me what the entity does, I can write an accurate 2-3 sentence description based on that material.

1 item

ResearchGlobal2026-11-01

VOLTA Malware Uses Claude and Gemini APIs to Rank Stolen Data by Value

Cisco Talos has documented VOLTA-AUTODOXER, a Windows infostealer. It sends harvested personal data and credentials to commercial frontier model APIs. The malware ranks victims by how profitable they are to exploit. It routes requests through OpenRouter, defaulting to Claude Opus and falling back to Kimi-K2 and Gemini 2.5 Flash when one model refuses. Stolen enterprise AI API keys can be weaponized as analytical infrastructure inside an active attack chain.

VOLTA-AUTODOXER Claude Opus Kimi-K2 Gemini 2.5 Flash Anthropic Google DeepMind Moonshot AI API credential theft model API abuse infostealer