VOLTA Infostealer Uses Claude and Gemini to Triage Victims
The VOLTA-AUTODOXER infostealer represents a significant escalation in malware sophistication, weaponising commercial LLMs via OpenRouter to automatically prioritise stolen victim data by financial value. The malware implements a resilient multi-model fallback chain across Claude, Kimi, and Gemini, actively circumventing individual model refusals to generate monetisation-ranked dossiers. This marks a qualitative shift in infostealer design — transforming raw credential dumps into analyst-grade intelligence reports with minimal human operator effort.