New AI-driven Windows malware feeds stolen data to Claude to rank victims’ assets by value, then deletes itself - payload builds custom target assessment, can switch models if one refuses, or skip the

A newly documented Windows malware family called VOLTA uses a commercial AI model to rank stolen data by its value to an attacker, then erases its own executable, according to an analysis reported by Tom's Hardware. The implant targets victims through Chrome session theft and assembles a dossier on each machine before sending it out for scoring. Its use of AI is limited to that assessment step, but the design shows how stealers are beginning to automate work once done by a human analyst.

After infection, VOLTA gathers a relatively standard list of stolen data, then enriches it locally. It searches the victim's Gmail for receipts from Amazon, DoorDash, Uber Eats, Grubhub, Walmart and PayPal to confirm a home address, pulls order histories from Uber Eats and DoorDash, reuses a stolen Discord token to complete the victim's profile, and values Roblox items through Rolimons. The results are written to a file called Identity_Report.txt and serialized to JSON.

That dossier is POSTed to OpenRouter, a model router, along with a system prompt, and any reply is saved as AI_Analysis.txt. Both files are exfiltrated together in an archive named volta_dox.zip. The inference call runs over the victim's own network connection. The prompt asks for a concise, citation-backed assessment of the victim's suitability as a target, including an opsec section analyzing overall security posture and password hygiene.

The hardcoded default is Anthropic's Claude Opus 4.6, an older model released in February, at a temperature of 0.2. That low setting suggests the operator favors predictable output. VOLTA also watches for refusal phrases and thin replies, switching in order to Moonshot AI's Kimi K2 and Google's Gemini 2.5 Flash. If no OpenRouter API key is supplied, the dossier can still be sent over Telegram without the AI analysis.

VOLTA appears built for resale. A template with six swappable slots covers a custom Telegram channel, API keys and settings, filled at build time so a customer receives a custom binary. The slot credentials are encrypted but recoverable from the file. A working build delivers ranked target assessments to the customer's Telegram inbox without attacker-owned infrastructure, leaving the chokepoints on the services themselves.

Much of the token theft depends on bypassing Chrome's App-Bound Encryption, which VOLTA does by launching Chrome headless. An application-control policy restricting which processes may launch Chrome headless blocks that decryption path, reducing exposure to this method without stopping other theft, the AI stage or exfiltration. The main executable may delete itself, but a volta_debug.txt log showing what was collected and whether the model call succeeded should remain. Victims are advised to rotate all API keys, tokens and passwords, and to move funds from any wallet whose seed phrase was stored in plaintext to a new wallet with a fresh seed, preferably generated on an air-gapped device.

More AI news from TechManNews.