VOLTA: An Infostealer That Lets AI Rank How Much You're Worth

Cybercrime's newest idea is uncomfortably simple: steal everything, and let AI sort out what matters. Cisco Talos has published an analysis of VOLTA, a self-deleting Windows infostealer that augments the usual credential theft with an LLM-powered profiling stage - turning each infected machine into a prioritized, citation-backed dossier on its owner.

The malware, self-named "VOLTA-AUTODOXER" and surfaced through the CAIRN research effort, leaves no attacker-owned infrastructure behind and deletes itself when done. What makes it different is that the AI isn't supporting a classic malware capability - it's working as an intelligence analyst on the operator's behalf.

What it steals, and how it digs deeper

VOLTA's harvest goes well beyond passwords: browser credentials, cookies and saved payment cards across Chromium browsers, Firefox and Thunderbird; Outlook profiles; Slack workspaces; Steam, Battle.net, Discord and Telegram sessions; Roblox accounts; Microsoft OAuth tokens; SSH and cloud-provider keys; Wi-Fi passwords in plaintext; and screenshots. It even runs an embedded cracker against crypto wallet vaults, logging the result as "WALLET VAULTS CRACKED" in its own report.

Then comes the unsettling part. Using the victim's own stolen sessions, VOLTA searches their Gmail for Amazon, DoorDash, Uber Eats, Grubhub, Walmart and PayPal receipts to corroborate a home address, pulls food-delivery order history, enriches the Discord profile, and gets a live valuation of the victim's Roblox inventory.

An AI analyst with fallback models

The assembled "Identity_Report.txt" is serialized to JSON and POSTed to OpenRouter with a system prompt instructing the model to act as "a forensic intelligence analyst drafting a target assessment." The required output includes a "WHAT THEY'RE WORTH" section ranking monetizable assets on a low/medium/high tier, plus a "THEIR OPSEC" assessment of the victim's security habits. The default model is Claude Opus 4.6; if the malware detects a refusal, it fails over to Kimi K2, then Gemini 2.5 Flash - a chain Talos reads as deliberate engineering around model guardrails. The whole inference round-trip happens on the victim's own machine and connection before the results exfiltrate in a "volta_dox.zip" archive.

Sold as a feature, and what to do

Talos assesses VOLTA is a builder-model commodity: six swappable configuration slots are filled at build time, meaning the AI dossier is a selling point any customer can aim at victims. Defenses include blocking or alerting on Chrome launched with --headless (which breaks the App-Bound Encryption bypass), using hardware-backed credential stores, and - after a compromise - preserving the "volta_debug.txt" harvest log, revoking tokens, changing passwords, and treating any plaintext seed phrase as fully compromised: migrate funds to a wallet whose seed was generated on an air-gapped device.