New VOLTA infostealer uses commercial AI models to profile and rank stolen victim data
MALWAREredteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
VOLTA, also called VOLTA-AUTODOXER, is a self-deleting Windows infostealer that harvests credentials, cookies, session data and cryptocurrency information. It then uses large language models, reported to include Claude, Gemini and Kimi, to enrich identities and rank victims by monetisation value.
For IT people · Written by AI from 2 sources · Wrong?
What to do
- Enable multi-factor authentication on email, messaging and cryptocurrency accounts to limit the damage from stolen credentials.
- Clear saved browser passwords and sign out of sessions on any device suspected of infection.
- Monitor endpoints for unexpected access to browser credential stores and for unusual outbound connections.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 2 outlets
GBHackersThe Hacker News