This malware can ask AI which stolen accounts matter most
The theft does not need AI. In the VOLTA sample, stolen account details go to an AI model to rank victims. Talos studied the code, not a proven live campaign. Protecting and ending stolen sessions still matters.
What the source reports
Cisco Talos took apart a sample of VOLTA, software built to steal login details and active sessions. The code gathers account data and sends a bundle to an AI model to help rank victims. It can try another model if one refuses. But the theft step can work without AI. Talos did not establish that this sample has been used in a live campaign. Its analysis shows what the code can do, not how often criminals do it. Defenders should limit what an active session can reach, end stolen sessions, and check that access was cut off. An AI model refusing one request does not stop the theft.
Original source
- Title
- Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
- Author
- Cisco Talos
- Publication
- Cisco Talos
- Date
- Saturday, October 31, 2026