欢迎来到Kernel Panic，由Lily Hay Newman和Matt Burgess从隐私和数字安全的新世界里制作的每周通讯。 每周在收件箱里收到这份通讯登记到这里
新的研究完全与克内尔Panic 显示分享，黑客开始将AI功能添加到一个新的信息化恶意软件的菌株中，使得系统可以自动剖析被害者，并快速地浮出最高值目标及其信息。 Dubbed “Volta-Autodoxer”由于恶意软件在内部如何称呼自己，思科·塔洛斯研究者的调查结果揭示了商业LLMs被用于增强和增强已确立的恶意软件类型的能力的方式。
通常隐藏在假冒软件中，信息化者被设计成能够满足自己的名字，抓取用户名，密码，认证信使，饼干，信用卡数据，以及更多来自被感染的机器。 近年来许多最大的数据被破坏——从包括AT&T和Ticketmaster在内的与Snowflake有关的广泛被破坏到窃取迪士尼的一兆字节数据——都是黑客利用信息采集者收集的登录细节进入目标造成的。 总体而言，近年来恶意软件被用来窃取数以亿计的证书。
“沃尔塔作为一个窃取者相当成熟。 称 Ryan Fetterman是Cisco Talos的安全研究员。 “它将所有这些东西汇集在一起，最终产生一个序列化的档案，可以发送给几个LLM模型。 要求模型扮演情报分析师的角色，这就像一个优先和分析功能。
Talos使用其新的CAIRN框架标记了恶意软件，这个框架是用来识别包含AI能力的黑客工具的。 Fetterman 指出认为塔洛斯没有追踪沃尔塔是否被野外所使用。
沃尔塔的传统信息化能力很强，它会搜索存储在浏览器中的密码，Microsoft OAuth令牌，cookie，支付卡，和加密钱包种子短语，但也活动Discord,Telegram,Steam，和Roblox会话。 然后恶意软件会利用它的第一回合调查结果进行第二次更深入的搜索。 Volta通过查看目标Gmail或另一个中心账户，利用UberEats和DoorDash等服务机构提供的收据和订单历史等数据，更全面地了解受害者、其位置和习惯。
完成这一切后，恶意软件将其发现输入AI工具，使用OpenRouter进行分析，这种服务可以向多个不同的AI提供者发送提示。 沃尔塔默认其请求为Anthropic的Claude Opus 4.6. 但显然为模型的护栏可能阻断活性做准备，沃尔塔是用回倒装为中国开口重量的Moonshot AI Kimi K2而建造的，如果失败，则由Google的Gemini 2.5闪电所制造。 建立倒计时和依靠成本效益高、更老的一代模式是攻击者的共同技术。
Volta的创作者包括一个240个字的提示，包括弹出点和编号列表，作为他们对分析所收集的数据的任何LLM的指示的一部分。 “你是一个法医情报分析师，它指示聊天组制作关于这个人的“执行摘要 ”，详细介绍他们做什么，“他们的价值 ”，并编写“他们的意见 ”。 新增认为聊天员应该“将点点连接到字段之间”，例如检查某人的Wi-Fi密码是否与其姓相符。 “走入深处，不要宽”，即时称。
”Fetterman 称。 “但是，它们正在建设中，期望在最初提出要求时有可能击中拒绝模式。 所以他们计划失败那种级联更多允许的模型他们走下链。 并且还有在没有人工智能的情况下仍然使用植入的能力。 AI的电话有点超乎寻常
一些低级别的网络罪犯和诈骗犯抱怨AI slop充斥网络犯罪论坛，但安全研究者越来越多地发现其他黑客使用LLMs进行编码任务或分析被窃信息的行踪。 例如，威胁情报公司Crowdstrike的研究人员最近告诉WIRED说，他们看到四个不同的黑客团伙，在中文、西班牙文和英文、印度尼西亚文和俄文方面有着不同的复杂性，他们使用AI工具来损害世界各地数十个目标，包括保健、零售和旅行方面的政府实体和企业。
Cisco的Fetterman 称 Volta包含了一些线索，说明它可能是为了向一系列攻击者出售而建造的，而不是为某个特定的演员运动而开发的。 而其核心的恶意软件仍然是一种传统的信息化工具，而AI扩展预示着未来会更加入侵和邪恶的活动。
“如果你能更快地识别出自己的高价值目标，你可能有更多的机会使用他们的证书或使用被窃取的地物进行认证，“我们看到更高级的能力可以提供给低级的先进攻击者。 这确实很有趣
本文由 AI宝库自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。
Welcome to Kernel Panic, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox each week, sign up here.
New research shared exclusively with Kernel Panic shows that hackers have started adding AI functionality into a new strain of infostealer malware, making it possible for the system to automatically profile victims and quickly surface the highest value targets and their information. Dubbed “Volta-Autodoxer” because of how the malware refers to itself internally, the finding by Cisco Talos researchers sheds light on the ways that commercial LLMs are being used to augment and enhance the capabilities of established types of malware.
Often hidden in counterfeit software, infostealers are designed to live up to their name, grabbing usernames, passwords, authentication tokens, cookies, credit card data, and more from infected machines. Many of the biggest data breaches in recent years—from the widespread Snowflake-linked breaches that included AT&T and Ticketmaster to the theft of a terabyte of Disney data—have resulted from hackers accessing targets using login details gathered by infostealers. Overall, the malware has been used to steal hundreds of millions of credentials in recent years.
“Volta is pretty mature as a stealer. It casts a pretty wide net for what it collects,” says Ryan Fetterman, a security researcher at Cisco Talos. “It compiles all of those things together, ultimately producing a serialized dossier that it can send to a couple LLM models. It’s asking the model to act like an intelligence analyst and produce structured citation-backed assessment of the victim. It’s like a prioritization and analysis function.”
Talos flagged the malware using its new CAIRN framework, built to identify hacking tools that incorporate AI capabilities. Fetterman notes that Talos did not track whether Volta has been used in the wild.
Volta’s traditional infostealer capabilities are powerful and seem to be geared toward targeting younger internet users with robust digital lives. It sweeps for passwords stored in browsers, Microsoft OAuth tokens, cookies, payment cards, and crypto wallet seed phrases, but also active Discord, Telegram, Steam, and Roblox sessions. Then the malware does a second, deeper sweep using its first-round findings. By looking through the target’s Gmail or another central account, Volta builds a fuller picture of the victim, their location, and their habits using data like receipts and order history from services including UberEats and DoorDash.
Once all of this is done, the malware feeds its findings into AI tools for analysis using OpenRouter, a service that can send prompts to multiple different AI providers. Volta defaults its requests to Anthropic’s Claude Opus 4.6. But apparently preparing for the possibility that the model’s guardrails could block the activity, Volta is built with fallbacks to the Chinese open weight Moonshot AI Kimi K2 and, if that fails, Google’s Gemini 2.5 Flash. Building in fallbacks and relying on cost-effective, older-generation models are common techniques among attackers.
Volta’s creators included a 240-word prompt, including bullet points and a numbered list, as part of their instructions to any LLM analyzing the collected data. “You are a forensic intelligence analyst drafting a target assessment from a structured evidence bundle,” the Volta prompt says. It instructs the chatbot to produce an “executive summary” about the person, details of what they do, “what they’re worth,” and a summary of “their opsec.” It adds that the chatbot should “connect dots across fields,” for example, checking whether someone’s Wi-Fi password matches their last name. “Go deep, not wide,” the prompt says.
“The prompt is pretty carefully crafted not to imply anything overtly malicious,” Fetterman says. “But they’re building in the expectation to potentially hit model refusals at first request. And so they plan for failover kind of cascading to more permissible models as they go down the chain. And there’s also the capability to still use the implant without the AI. The AI calls are kind of above and beyond, but the malware will still work without it.”
Some low-level cybercriminals and scammers have complained about AI slop filling up cybercrime forums, but security researchers are increasingly discovering other hackers using LLMs for coding tasks or analyzing troves of stolen information. Researchers at threat intelligence firm Crowdstrike, for example, recently told WIRED they had seen four distinct hacking groups with varying sophistication—operating in Chinese, Spanish and English, Indonesian, and Russian—using AI tools to compromise dozens of targets around the world, including government entities and businesses in health care, retail, and travel.
Cisco’s Fetterman says Volta contains some clues that it may have been built to sell to a range of attackers rather than being developed for one specific actor’s campaigns. And while the malware at its core is still a traditional infostealer, the AI expansion foreshadows even more invasive and sinister activity in the future.
“If you’re able to identify your high-value targets faster, you probably have a better chance of using their credentials or authenticating using stolen tokens more often than maybe you would have if you had to do that triage yourself,” Fetterman says, referencing the fact that authentication tokens expire and passwords can be changed. “We’re seeing more advanced capabilities accessible to lower-level sophistication attackers. It’s really interesting and disturbing.”
Auto-fetched and translated by AI Gem Box. All rights belong to the original author.