Critical impact

Malware uses LLMs to rank victims by how much they're worth

Industry news•

What happened

The VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets, then sends a structured evidence bundle about the victim to a large language model to rank the victim’s assets by monetization value. The malware is self‑deleting, operates without attacker‑owned infrastructure, and uses a fallback chain of three models if the first model refuses the assessment.

Why it matters

This demonstrates a new cybercrime technique where AI is used as an intelligence analyst to prioritize stolen data, potentially making attacks more efficient and profitable.

Is this a big deal?

Get stories like this every morning

The day's AI news in plain English, in your inbox at 8:30 IST. Free.

More AI news

AI unlocks Gödel's notebooks, said to contain hundreds of proved theoremsIndustry news · 13 Nov 2026Gemini 4 Hydrogen and OrchestratorIndustry news · 12 Nov 2026Gemini 4 HydrogenIndustry news · 12 Nov 2026I'm making LLMs work on small and old devicesIndustry news · 12 Nov 2026United Airlines bans AI agents from booking flights on behalf of travelersIndustry news · 11 Nov 2026

This page was collected from blog.talosintelligence.com and summarised automatically by AIPulsee's pipeline. See how it runs.