VOLTA infostealer uses AI to rank victims by value
Original title: VOLTA, the infostealer that asks an AI which victims are worth the effort
The malware deletes itself after collecting data and forwards AI-ranked victim profiles via Telegram.
Cisco Talos reports on VOLTA-AUTODOXER, a Windows infostealer that steals browser data, sessions, and Wi-Fi passwords before using LLMs to profile victims. It ranks assets as low/medium/high worth and assesses opsec, then sends data in staged ZIP archives to a Telegram channel.
- Deletes itself after running
- Defaults to Anthropic Claude Opus 4.6
- Sends data in up to three ZIP files
Impact: stolen credentials and personal data
- Vendors
- Cisco Talos
- Malware
- VOLTA
- Organizations
- Talos
From the original article
5 min read at securityaffairs.com
VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims’ value and rank targets for attackers. Cisco Talos has analyzed a new Windows infostealer called VOLTA, which calls itself VOLTA-AUTODOXER. It steals the usual data, then hands the loot to a large language model that ranks what the victim is […]
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.