Infostealer VOLTA That Has AI Assess Stolen Information

VOLTA is a Windows-based infostealer malware that uses a large language model (LLM) to assess the value of stolen data. It steals credentials, sessions, and cryptocurrency wallets from browsers and applications, enriches the stolen data by querying external services, and sends the aggregated information to LLMs via OpenRouter to evaluate victim monetization potential. The malware exfiltrates data through Telegram and employs advanced techniques such as bypassing Chrome App-Bound Encryption and validating BIP-39 seed phrases. Only one sample has been observed, submitted to VirusTotal in October 2026, with no confirmed active use in the wild.

• Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealerMalware2026-10-31
• Inside Phexia: A macOS malware delivered through ClickFixMalware2026-11-05
• LiteLLM supply chain compromiseCampaign2026-10-22
• Aoki: Infostealer Targets AI Coding Assistant CredentialsMalware2026-10-15
• Inside an AhsayCBS Intrusion: Hidden Webshells, a CryptoMiner, and a C2 ImplantMalware2026-11-09