Bring a tent, I've got the coffee: Lessons from it-sa
Source Cisco Talos
Description
VOLTA is a sophisticated Windows infostealer malware that uses AI to automate the analysis and prioritization of stolen victim data for cybercriminals. It collects credentials, sessions, and cryptocurrency wallets, then uses large language models to rank assets by monetization value, enriching data with stolen session access and email content. This automation reduces the manual effort attackers need to monetize stolen data and enables even low-level actors to bypass security controls and prioritize high-value targets. Organizations are advised to implement application control policies to detect suspicious Chrome headless processes, secure credential storage, revoke compromised tokens, change passwords, and treat exposed cryptocurrency wallets as fully compromised.