StoryFirst seen

Cisco finds Windows infostealer using Claude to value victims

The malware uses Claude to estimate a victim's worth to criminals and then deletes itself after running, showing AI tools being turned against users.

Archived Updated

Everything it touches

10 names 1 voices 1 source posts

The story’s neighborhood

NAMESVOICESPOSTS

Explore the graph, or choose a connection below.

Follow the evidence

The source posts

This brief comes from Tech Twitter’s edited headlines. The posts below are the sources grouped with the story; statements in them belong to their authors.

ℏεsamLead source
malwares are getting too smart. Cisco’s security research team found a Windows infostealer that steals your passwords, cards, crypto wallets, then deletes itself after it runs. but it doesn’t stop there. it uses Claude Opus 4.6 to estimate how much you’re worth to a criminal AND rank your most valuable assets, after searching your gmail for Amazon and Doordash receipts. if Claude refuses to → switches to Kimi K2 → then Gemini 2.5 Flash, all through openrouter this type of model routing to go around gaurdrails is becoming common within cyberattacks.
Read original on X

How the headline evolved

  1. Cisco finds Windows infostealer using Claude to value victims

  2. Cisco finds infostealer malware using Claude to value victims' assets

  3. Cisco finds infostealer malware using Claude to rank victims' assets

  4. Cisco finds infostealer malware using Claude to rank victims' valuable assets

  5. Cisco finds infostealer malware using Claude to rank victims' valuable assets

  6. Cisco finds infostealer malware using Claude to rank victims' valuable assets

  7. Cisco finds infostealer malware using Claude to rank victims' valuable assets

  8. Cisco finds Windows infostealer using Claude to rank victims' valuable assets

Shared connections

Related stories