2026-10-31 Cisco Talos researcher Ryan Fetterman's analysis of VOLTA-AUTODOXER, a self-deleting Windows infostealer that uses a large language model in a dedicated "victim-ranking stage" (Unite's writeup). First appearance of an LLM running inside the attack tool itself on the topic — Talos primary, with a single secondary writeup so far. Watch: which model the ranking stage uses and what it changes in practice, how widely the malware has spread, whether other malware kits copy the design, and any takedown or law-enforcement move.