AI Evaluation: Model-Driven Victim Prioritization in the VOLTA Infostealer Trojan

Cisco Talos disclosed that the infostealer trojan VOLTA, after stealing credentials, sessions and cryptocurrency wallets, organizes victim data into structured data packages and sends them to large models to rank victims' assets by monetization value. The trojan calls models through OpenRouter, using anthropic/claude-opus-4.6 by default; when refusal expressions such as "I can't" appear in the reply, it switches in turn to kimi-k2 and gemini-2.5-flash, trying at most three models; the temperature is fixed at 0.2. The system prompt asks the model to act as a "forensic intelligence analyst," output a list of asset values labeled low, medium and high, and assess the victim's security habits, then supplement the data with stolen Gmail receipts, UberEats and DoorDash orders, and Discord and Roblox account data. Talos noted that the trojan self-deletes and has no attacker-owned infrastructure; the program reserves six replaceable configuration slots, filled in at compile time, and the authors infer that this is a sell-by-custom-compilation model.