Monday 2 November

Morning brief

Threat level: Elevated

Good morning. Today's threat level is elevated, with a major crypto theft attributed to North Korea and a fast-moving infostealer that uses AI to rank its victims.

1. 1New VOLTA infostealer uses commercial AI models to profile and rank stolen victim data▶ 0:10

   VOLTA is a self-deleting Windows infostealer that harvests passwords, cookies, session data and cryptocurrency details. It reportedly uses commercial AI models, including Claude, Gemini and Kimi, to profile victims and rank them by how much they are worth to attackers.

2. 2FBI and TRM link North Korea's TraderTraitor group to billion-dollar Binance crypto theft▶ 0:34

   The FBI and TRM attribute the 29 October attack on Binance to North Korea's TraderTraitor group. TRM reports high confidence and says the attacker tested code on wallets for about 36 hours before installing it on a Binance hot wallet. Binance says it will cover the losses.

3. 3FBI links North Korea to $6.3 billion Binance crypto heist▶ 0:57

   The Verge reports that the FBI links the roughly 6.3 billion dollar theft to North Korean actors, whom it tracks as TraderTraitor. Stolen tokens were reportedly converted to Ethereum, but the FBI has released little further evidence.

4. 4Court cases over US 2026 midterm election integrity and federal voter data actions▶ 1:17

   Several court cases over the 2026 US midterms are active. Recent rulings include an injunction blocking DHS election field operations in nine states and the vacating of a federal voter list maintenance policy. Further hearings are scheduled for early to mid November.

Written automatically by AI from today’s top stories. Open any story for the full details and sources.