Cisco Talos Details VOLTA Infostealer’s LLM Victim-Ranking Stage

Cisco Talos analyzed VOLTA-AUTODOXER, a Windows infostealer that uses a large language model to rank stolen credentials by monetizable value. The malware extracts extensive user data and enriches it with AI to prioritize targets for attackers. Talos developed CAIRN, a toolkit to detect AI-integrated malware, and shared findings on VOLTA’s novel AI-driven victim assessment.