Cisco Talos Details VOLTA Infostealer’s LLM Victim-Ranking Stage

Cisco Talos researcher Ryan Fetterman on October 31, 2026 published an analysis of VOLTA-AUTODOXER, a self-deleting Windows infostealer that follows a broad credential-theft pass with a large language model stage designed to rank each victim's monetizable assets. Talos describes VOLTA as a mature stealer implant with an optional AI-integration layer, and says every observed endpoint is third-party controlled, with no attacker-owned infrastructure. In Talos's assessment, the novelty of the AI…

This article has been indexed from Unite.AI