Cisco Talos
Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to profile victims and rank their most valuable assets.
Summary from the publisher's feed.