Case volta-autodoxer-infostealerAI-assisted malwareWorldwide
Volta-Autodoxer infostealer uses AI to 'autodox' victims
Cisco Talos detailed Volta-Autodoxer, a Windows infostealer first reported by WIRED. It steals logins, cookies, payment cards, crypto wallets, Discord sessions and order receipts such as UberEats. It then sends the data to AI models (Claude by default, with Kimi K2 and Gemini fallbacks) to build a victim dossier and rank the victim's assets. Talos has not observed it in real attacks.
MediumAttack using AIStatus: Under investigationVerified case file
Open in the interactive mapCite this case
- Reported
- Oct 31, 2026
- Location
- Worldwide
- Target
- Individual users' credentials, payment and account data
- Severity
- Medium
- Verification
- Reported by credible press or researchers
- Triggered by
- Unknown
- Actor type
- Unknown
- Sector
- Individuals & consumers
- Reported loss
- None reported
- CVE
- None
What happened
Cisco Talos detailed Volta-Autodoxer, a Windows infostealer first reported by WIRED. It steals logins, cookies, payment cards, crypto wallets, Discord sessions and order receipts such as UberEats. It then sends the data to AI models (Claude by default, with Kimi K2 and Gemini fallbacks) to build a victim dossier and rank the victim's assets. Talos has not observed it in real attacks.
Impact: Credentials, credit card numbers, Discord sessions and food-delivery receipts are collected. Number of victims Unknown.
Who triggered it
Actor: Unknown
Attribution: No attribution given in the summary.
Motive: Data theft and victim profiling; further motive Unknown.
How it happened
Attack vector: Infostealer malware that uses AI tools to collect and process victim data. Delivery method Unknown.
Root cause: Unknown
Timeline
- Reported by WIRED Security
Response
Malware recently uncovered and reported by researchers. No other response stated.
Current status: Under investigation
Research warnings this case matches
- Seen in real incidents AI makes cyberattacks easier, faster and larger · CAIS
- Seen in real incidents Criminals and state hackers use AI in cyberattacks · International AI Safety Report
- Seen in real incidents Malicious actors and misuse · MIT AI Risk Repository
Compared with published AI risk research from several institutes on the Research vs reality page.
Sources (open in a new tab)
- WIRED Security wired.com
- Security Boulevard securityboulevard.com
- Startup Fortune startupfortune.com
Cite this case
Volta-Autodoxer infostealer uses AI to 'autodox' victims. AI Threat Watch, case volta-autodoxer-infostealer, Oct 31, 2026. https://aithreat.io/cases/volta-autodoxer-infostealer/
Permanent link: https://aithreat.io/cases/volta-autodoxer-infostealer/
Related cases
The same type of incident, most recent first.