VOLTA, also known as VOLTA-AUTODOXER, gathers sensitive information including payment cards, cryptocurrency seed phrases, and personal records from platforms like Gmail and UberEats. The malware compiles these details into structured bundles and queries an AI model configured with a low temperature of 0.2 to act as a forensic analyst. To ensure execution, the malware automatically routes data through backup models if the initial provider detects malicious activity and issues a refusal.
Key points
The malware prompts language models to act as forensic intelligence analysts that categor…: The malware prompts language models to act as forensic intelligence analysts that categorize victim assets into low, medium, and high monetization tiers.
A built-in multi-model fallback chain switches between up to three backup AI models if re…: A built-in multi-model fallback chain switches between up to three backup AI models if refusal phrases like "I can't" are detected.
Automated AI triage enables attackers to efficiently prioritize high-value targets withou…: Automated AI triage enables attackers to efficiently prioritize high-value targets without manually sifting through large volumes of exfiltrated data.
Sources checked by our analysis pipeline: 1
- VOLTA is a mature stealer implant with an optional AI-integration layer. After stealing credentials, sessions, and cryptocurrency wallets, VOLTA sends a structured evidence bundle to an LLM to rank the victim’s assets by monetization value.
- If a model refuses to perform the target assessment, VOLTA fails over to a three-model chain, implying a direct engineering effort and expectation of hitting model guardrails.
- This stealer is self-deleting, and there is no attacker-owned infrastructure. The novelty in the AI-integration is that it is not supporting a traditional malware capability but working as an intelligence analyst on behalf of the operator.
There is a new idea in the cybercrime world — cast a wide net, steal everything, and let AI sort out the specifics. A new malware self-named “VOLTA-AUTODOXER,” surfaced through the CAIRN research effort, is a self-deleting Windows infostealer that augments its post-theft workflow with an LLM-powered victim-profiling stage.
After harvesting the standard stealer haul, including browser passwords; cookies; payment cards; cryptocurrency wallet seed phrases; Discord, Telegram, Steam, and Roblox sessions; Microsoft OAuth tokens; SSH and cloud-provider keys; Wi-Fi…
Mounting skepticism across Wall Street over heavy artificial intelligence infrastructure spending has prompted a strategic retreat as tech sector valuations face broader market pressure. To complete the transaction ahead of a planned IPO, lead backers from the United Arab Emirates and wealthy individual retail investors are being tapped to fill the remaining financial gap. The pullback follows an increasingly cool reception from traditional major institutional investors.
Relying on a budget microcontroller officially recommended by Meta, an independent creator assembled a wearable device using the tech giant's own open-source code and cloud tokens. The project demonstrates how readily accessible development kits can replicate core corporate hardware prototypes months before their commercial debut. By pairing custom code with external artificial intelligence tools, the prototype bypassed significant system constraints to unlock practical daily functionality.
Academic leaders urged caution regarding emerging technologies during a major commencement ceremony. Speaking directly to graduates, the head of the country's premier science institute called for deliberate awareness surrounding artificial intelligence adoption. The event brought together institutional leadership to reflect on technological responsibility.