New AI-driven malware VOLTA steals passwords and cryptocurrency wallets to identify high-value victims

Cisco Talos discloses the Windows infostealer VOLTA, which steals passwords and cryptocurrency wallets and then uses AI to profile victims and identify high-value targets. The stolen data is passed via OpenRouter to models to generate asset value rankings and assessments of security habits; its AI calls claude-opus-4.6 by default, and can switch to kimi-k2 and gemini-2.5-flash if refused.