New VOLTA infostealer uses commercial AI models to profile and rank stolen victim data
MALWAREClauderedteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
VOLTA-AUTODOXER is a self-deleting Windows infostealer that collects passwords and cookies from Chromium-based browsers, Outlook profiles, Slack workspaces and cryptocurrency data. It sends harvested material to commercial LLMs, reported as Claude, Gemini and Kimi, to build victim profiles and rank them by financial value. The articles do not give CVE identifiers, hashes or specific detection guidance, so defenders should rely on general infostealer controls such as monitoring for unusual browser credential access and restricting outbound traffic to AI API endpoints.
For security analysts · Written by AI from 2 sources · Wrong?
What to do
- Enable multi-factor authentication on email, messaging and cryptocurrency accounts to limit the damage from stolen credentials.
- Clear saved browser passwords and sign out of sessions on any device suspected of infection.
- Monitor endpoints for unexpected access to browser credential stores and for unusual outbound connections.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 2 outlets
GBHackersThe Hacker News
Who and what is in it
Malware
Products