CYBER MEDIA CYBER MEDIA Submit a tool
Language 中 EN

Explore

AI tools AI News

CYBER MEDIA

Services About Talk about a project

Work with us

Submit a tool Advertise

Account

Sign in

AI News

BlogCisco TalosBy Ryan Fetterman

Cisco Talos details VOLTA, an infostealer that uses LLMs to rank victims by value

Cisco Talos details VOLTA, an infostealer that uses LLMs to rank victims by value

Cisco Talos details VOLTA-AUTODOXER, a self-deleting Windows infostealer. It takes browser passwords, cookies, cards, crypto wallets, chat and gaming sessions, cloud keys, and Wi-Fi passwords, then uses stolen Gmail and food-delivery sessions to confirm a victim's address and habits. It bundles this evidence and sends it through OpenRouter to an LLM that scores how much the victim's holdings could be worth to the attacker, falling back to other models if one refuses. There is no attacker-owned infrastructure, and it appears to be sold as a builder. Talos advises restricting headless Chrome launches, preserving the debug log, revoking tokens, changing passwords, and moving wallet funds.