Cisco Talos: the VOLTA infostealer asks an LLM what each victim is worth
VOLTA sends stolen data to OpenRouter for a ranked target assessment, with a model fallback chain built for refusals. What defenders can check today.
Topic · 5 stories
5 stories tagged malware on AI Tamer, newest first.
VOLTA sends stolen data to OpenRouter for a ranked target assessment, with a model fallback chain built for refusals. What defenders can check today.
AIR says a top-ranked fake Solana starter kit had one install step that dropped NetSupport Manager on Windows. The signs to check if you ran it.
Cursor's extension marketplace served a malicious Claude Code 2.1.313 that added an attacker SSH key and reverse tunnel. What Cursor users should check.
CloudSEK links seven fake NebulaAI SDK packages on npm, from four burner accounts, to a modified KNTRAT Windows trojan dropped by a preinstall hook. OSV flags api-nebula, llm-nebula and nebula-sdk.
Cisco Talos says malware is embedding plain-language instructions meant to steer AI analysis tools toward a benign verdict. It traces the method across four families and 84 samples from January 2025 through July 2026.