Cisco uncovers VOLTA stealer that uses LLMs to value stolen data and swap models to dodge guardrails

Cisco Talos disclosed VOLTA-AUTODOXER, a Windows infostealer that embeds LLMs like Claude as an 'intelligence analyst' to value and rank victims' assets, and switches to Kimi when Claude refuses, highlighting multi-model abuse to bypass guardrails.

2026-11-02 ~ 2026-11-02 · 2 related posts

• Cisco finds Claude-powered infostealer that routes to Kimi K2 to dodge AI guardrails — Hesamation · 2026-11-02
• Cisco Talos finds VOLTA infostealer using Claude to rank victims by their asset value — Hesamation · 2026-11-02