Malware uses LLMs to rank victims by how much they're worth