Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
Source: WIRED (opens in a new tab) · Lily Hay Newman, Matt Burgess
Intel Summary
WIRED reports the discovery of "Volta-Autodoxer," a newly identified infostealer malware that utilizes AI tools to automatically compile detailed data dossiers on victims. The malware targets credentials, credit card numbers, Discord sessions, and receipt data from services such as UberEats.
Why It Matters
The integration of AI capabilities into commodity infostealers enables automated data aggregation and victim profiling at scale, expanding the breadth and sensitivity of personal and financial information threat actors can systematically extract from infected systems.
Related Intelligence
- Report
Open-weight model GLM 5.3 built full Firefox exploit chains with zero human input in under 48 hours
Epoch AI researchers reported that the open-weight AI model GLM 5.3 autonomously generated full exploit chains targeting six Firefox releases by analyzing public security fixes. Operating with zero human input in under 48 hours, the model developed functional exploits before updates reached users, costing approximately $1,000 in API fees per release without triggering safety filters from tested providers.
The Decoder - Report
Google launches Gemini 4 Carbon with a ‘significant leap’ in cybersecurity
Google has launched Gemini 4 Carbon, its latest frontier model claiming substantial improvements in cybersecurity, coding, and agentic workflows. According to Google, the model ranked first on the Artificial Analysis Intelligence Index (v5.0) benchmark, outpacing frontier models including Claude Opus 5.5 and GPT-6 Astra.
The Verge - Report
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Ars Technica reports that Anthropic's VS Code extension on the Cursor platform was backdoored for nearly 12 hours. It is currently unknown how attackers compromised Anthropic's verified Cursor account to deploy the malicious extension.
Ars Technica - Report
‘Nobody’s Ready’: AI-Found Bugs Spark a Corporate Security Spending Spree
Enterprise software startup Atomicwork directed its engineering team to halt standard work and focus entirely on cybersecurity following multiple incidents over a 48-hour period. Reported compromises included a breach at root certificate authority eMudhra, a security compromise involving open-source AI request routing tool LiteLLM, and a newly discovered vulnerability in PHP.
The Information