Bring a tent, I've got the coffee: Lessons from it-sa

Cisco Talos discovered VOLTA, a sophisticated Windows infostealer that leverages AI to automate victim profiling and prioritize stolen data for monetization. The malware harvests credentials, browser sessions, and cryptocurrency wallets, then uses large language models (LLMs) to analyze and rank the value of stolen assets, enriching the data by searching victims' emails for purchase receipts. If an LLM refuses to process the data, VOLTA fails over to an alternative model to ensure continuous operation, reducing the need for manual effort by attackers and enabling even low-level threat actors to conduct high-impact attacks.

AI-extracted · verify before operational use