An infostealer asks Claude Opus 4.6 which victims are worth robbing
Cisco Talos finds the VOLTA infostealer sending each victim's stolen data to Claude Opus 4.6 through OpenRouter to rank what it's worth. The FBI blames North Korea's TraderTraitor for the theft of more than $6 billion from Binance as Binance says it has replaced 90%, and Jepsen tells ParticleDB users to migrate after finding lost committed writes.
- Cisco Talos found a Windows infostealer, VOLTA, that sends each victim’s stolen data to Claude Opus 4.6 through OpenRouter and asks for a ranked list of what to monetise, falling back to Kimi K2 and Gemini 2.5 Flash if the model refuses.
- The FBI says North Korea’s TraderTraitor group stole more than $6 billion from Binance and listed over 600 Ethereum addresses for services to block; Binance says it has already replaced 90% of the stolen assets.
- Jepsen found 96 issues in ParticleDB, Orkes’ database for AI workloads; ten were still open in the last build tested, including lost committed writes in the default mode, and Jepsen says users should migrate.
- DeepSeek published dsh-superagent, an MIT-licensed research prototype of a coding agent that watches one GitHub repository and answers requests, for example with a pull request.
Talos finds an infostealer that uses an LLM to appraise its victims
Cisco Talos published an analysis on 31 October of VOLTA, a self-deleting Windows infostealer with an optional LLM stage. It takes browser passwords, cookies and saved cards, Discord, Slack, Telegram and Steam sessions, Microsoft OAuth tokens, SSH keys, gcloud and VPN configs, Wi-Fi passwords and crypto wallets. It then uses the stolen sessions to dig further: Gmail receipts to confirm a home address, Uber Eats and DoorDash order history. The bundle goes to OpenRouter’s chat completions API, with anthropic/claude-opus-4.6 as the default model and Kimi K2 then Gemini 2.5 Flash as fallbacks. VOLTA detects refusals by looking for phrases like “I can’t”. The prompt asks for a “forensic intelligence analyst” assessment with a “WHAT THEY’RE WORTH” section that ranks assets low, medium or high. Talos says the build template suggests a builder sold to customers. Without an API key, the stealer skips the LLM step.
Why it matters
The defences are the usual ones. Alert on or block Chrome launched with --headless by unapproved processes, which is how VOLTA decrypts browser data. Keep credentials in hardware-backed stores, and treat any seed phrase stored in plaintext as burned.
The fallback chain is the tell
The interesting part is the fallback chain: the author expected the default model to refuse and built in two others. Talos doesn’t say whether OpenRouter or Anthropic have acted on the account. Expect more malware to outsource triage to commercial APIs, which makes provider-side abuse detection part of the defence.
The FBI blames North Korea for Binance, and Binance says it has refilled 90%
The FBI said on 31 October that North Korea’s TraderTraitor group was behind the theft of more than $6 billion in crypto from Binance on or around 29 October, CoinDesk reports. That’s the group the FBI blamed for the $1.5 billion Bybit hack in 2025. The FBI, the Secret Service and IRS Criminal Investigation listed over 600 Ethereum addresses, just under 20 Bitcoin addresses and one Solana address. They asked node operators, instant exchanges, DeFi services and analytics firms “to block transactions with or derived from addresses TraderTraitor actors are using to launder these stolen assets.” On Saturday Binance said it had replenished 90% of the stolen assets; co-CEO Richard Teng wrote on X that it would cover the remaining 10%, which NBC News says is in less liquid tokens. Binance plans to resume withdrawals on Sunday, according to CoinDesk.
Why it matters
If you run a node, bridge, swap service or anything that moves user funds, load the FBI’s address list into your screening now. The FBI expects laundering through DeFi and instant swaps.
Attribution was already settled; the address list is what’s new
TRM Labs had already attributed the theft to TraderTraitor “with high confidence”, as we reported on 29 October, and the FBI’s statement confirms it. Binance still hasn’t published a root cause beyond saying there were “additional points of breach” past one engineer’s laptop.
Jepsen tells ParticleDB users to migrate
Kyle Kingsbury’s Jepsen analysis of ParticleDB, published 31 October, found 96 issues in the multi-model database Orkes, maker of the Conductor workflow engine, sells for AI workloads. It combines transactional SQL, key-value storage, vector search and analytics. Jepsen tested single nodes, from 1.1.4 to 1.1.18.11.rc-22. Ten issues remained in that last build. The default occ transaction mode still lost committed writes in normal operation. serializable still allowed stale reads, and Lost Update when processes were killed; corruption in the write-ahead log or misdirected I/O caused partial or total data loss. Orkes, which paid for the work, says 1.1.19-rc.13 fixes the rest; Jepsen hasn’t tested it. Orkes’ docs now call the transaction modes “experimental”.
Why it matters
Jepsen’s advice is blunt: “halt further deployment of ParticleDB and migrate to other databases as soon as possible”, and check or rebuild your data from a more reliable source if you can.
New AI databases still need old guarantees
Vector search and “AI workloads” don’t excuse losing writes. Orkes deserves credit for paying for the test and publishing it. Until an independent test of 1.1.19, treat ParticleDB as experimental, as its own docs now do.
Quick hits
- DeepSeek published dsh-superagent, an MIT-licensed coding agent for one GitHub repository, built on its DeepSeek Harness. It listens to GitHub and optionally Feishu, takes requests from allowed people, and answers in the thread, for example with a pull request. DeepSeek calls it “research code, not production-ready software”.