VOLTA malware uses AI to assess the financial value of stolen data

The Windows infostealer collects login credentials and other personal data, then sends stolen information to a large language model to assess victims' value to attackers. Security Affairs reports that Cisco Talos analyzed the malware, which calls itself VOLTA-AUTODOXER and uses those assessments to rank potential targets.

• The Hacker News reports theft of Chromium browser passwords, cookies, Outlook profile data and Slack workspace data.
• Cyber Security News reports that VOLTA also steals Gmail and Discord sessions.

Covered by 3 publishers within 13 hours of the first report.

• The Hacker News: New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value

Reporting3

THN The Hacker News New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value · info@thehackernews.com (The Hacker News) 12:51 AM

CSN Cyber Security News VOLTA Malware Steals Gmail and Discord Sessions, Then Uses AI to Build Detailed Victim Profiles · Tushar Subhra Dutta 2:33 AM

SAF Security Affairs VOLTA, the infostealer that asks an AI which victims are worth the effort · Pierluigi Paganini 1:34 PM

Related

AH Google releases Gemini 4 Carbon as reports differ on its benchmark lead November 2

TH CyberCartel used AI agents to target over 400 Latin American financial firms October 21

THN Yoba attackers use fake ChatGPT and Claude apps to install crypto miners October 29

THN Malicious AGENTS.md file steers AI coding agent toward rogue npm package October 25

Topics AnthropicGoogle Gemini