VOLTA infostealer hands stolen data to AI models to rank what each victim is worth

Cisco Talos described a new information stealer called VOLTA in an analysis published on October 31, 2026. The malware, which calls itself VOLTA-AUTODOXER, runs on Windows and deletes itself when finished. Its real novelty starts after the theft. It organizes what it took into a structured file, sends it to a language model and has the model write up how valuable the victim is.

What it steals

The list is long. It includes browser passwords, cookies, saved cards, crypto wallet seed phrases, Discord, Telegram, Steam and Roblox sessions, Microsoft tokens, SSH and cloud keys, Wi-Fi passwords and screenshots. It then uses the stolen sessions to dig deeper. It searches the victim's Gmail for Amazon, DoorDash, Uber Eats and PayPal receipts to confirm a home address, pulls food order history and checks the market value of a Roblox inventory.

What the AI does

Once collection ends, a file with the address, employer, inferred birth year and card digits goes to the OpenRouter service. The system prompt tells the model to act as a forensic intelligence analyst. The required report ranks the victim's assets and tags each as low, medium or high by monetary value. A separate section assesses the person's security habits and password patterns. The model is also asked to connect names, addresses or schools to the victim's passwords.

Talos highlights the preparation for refusals. The malware names Claude Opus 4.6 as its default model. If a reply contains phrases such as "I can't" or "I'm not able," it tries Kimi K2 and then Gemini 2.5 Flash. Talos reads this as a sign that the operator expects to hit model guardrails. The analysis does not say which model actually answered. Without a key, the malware still runs and skips the model stage.

Why it matters

According to Talos, AI here does not speed up a known attack. It takes over the operator's analyst work. VOLTA looks like a product for hire, with six swappable slots for a Telegram channel and API keys, and a separate build for each customer. That means even someone with little skill could receive ranked victim reports on Telegram. The operator has no infrastructure of its own, as all traffic runs through third-party services. The sample was first seen on October 11, 2026.

How to defend

Talos says much of the token theft depends on launching Chrome in headless mode. Organizations should restrict which processes may start Chrome with --headless, or at least alert on it. Credentials should sit in hardware-backed stores. After a suspected infection, the %APPDATA%\volta_debug.txt file should be preserved even if the malware is gone, because it records what was taken. Tokens should be revoked and passwords changed. Crypto wallets with seed phrases in plain text on disk should be treated as compromised and moved to a new wallet.

Sources: Cisco Talos