Cisco Talos has analyzed VOLTA, a Windows infostealer that uses artificial intelligence to decide which of its victims are worth the most.
In research published Oct. 31, the security firm said the malware sends data collected from infected machines to large language models, which rank each victim’s assets by how much they could be monetized.
VOLTA collects browser passwords, cookies and payment cards, along with Discord, Telegram, Steam and Roblox sessions. It also targets Microsoft OAuth tokens, SSH and cloud keys, saved Wi-Fi passwords and cryptocurrency wallets.
Talos found that VOLTA also reuses the stolen sessions to comb Gmail for purchase receipts, check food delivery histories on DoorDash and Uber Eats, and price Roblox inventories, building a fuller profile of each victim.
Talos first saw the sample on Oct. 11 and described VOLTA as a mature, self-deleting stealer with an optional AI layer.
How the AI assessment works
VOLTA routes its evidence bundle through OpenRouter, a service offering access to many models, and its prompt casts the model as a “forensic intelligence analyst drafting a target assessment.” That assessment ranks the victim’s monetizable assets and rates how well they protect themselves, password habits included.
By default, the code calls Anthropic’s Claude Opus 4.6. If a model refuses, it moves to Moonshot AI’s Kimi K2, and after that to Google’s Gemini 2.5 Flash. Talos said this design lets VOLTA “fall back resiliently if it hits a model’s refusal.”
The company found no attacker-owned infrastructure. Every endpoint VOLTA contacted belonged to third-party services, which makes its traffic harder to block.
Talos did not report a victim count, but suggested VOLTA may be sold through a builder service, with buyers supplying their own Telegram and API settings for a custom build.
Talos recommended limiting which processes can start Chrome without a visible window, known as headless mode, and flagging unexpected launches, because VOLTA depends on this to steal tokens. Keeping credentials in hardware-backed stores also helps, it said.
Once a machine is infected, Talos said organizations should revoke any exposed tokens and reset passwords. A wallet whose seed phrase sat on disk in plain text should be treated as fully compromised. VOLTA is the latest example of attackers turning to AI to work faster.
