VOLTA infostealer uses a commercial AI model to profile victims after stealing their sessions
AI SECURITYChromeredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A new Windows malware program called VOLTA steals saved logins and active sessions from browsers and apps such as Gmail and Discord. It then sends the stolen data to an AI service, which writes a report estimating how valuable the victim is. Security researchers at Cisco Talos found it and say it is a mature tool sold to criminals.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Block Chrome from starting with the --headless flag unless a known developer process launches it.
- Check endpoints for the %APPDATA%\voltadebug.txt log and review outbound connections to the OpenRouter AI endpoint.
- If infection is suspected, revoke tokens and reset passwords from a clean device.
- Move crypto funds to a new wallet if the seed phrase was stored in plain text.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Malware
Companies