New AI-driven Windows malware feeds stolen data to Claude to rank victims’ assets by value, then deletes itself

Cisco Talos has identified the VOLTA infostealer, a Windows malware that exfiltrates victim data and sends it to Claude Opus 4.6 to rank assets by monetization value. The malware can switch AI models if one refuses or skip the AI step entirely, then self-deletes after completing the assessment. This represents a novel use of AI to automate target valuation in cyberattacks.