VOLTA malware steals passwords and asks AI what victims are worth

Why it matters

Infostealers have long been a staple of cybercrime, but they typically leave a human attacker with a large pile of raw logins and files to sort through. Delegating that sorting to AI changes the economics. Stolen credentials can be ranked by potential value, and personal profiles can be assembled without manual effort, which makes targeted attacks cheaper to run.

For ordinary users, the risk goes beyond a hijacked account. A victim whose data is cross-referenced with public information can be identified, profiled and located, which raises the stakes of a single infection.

What users can do

The basics still apply: keep the operating system and software up to date, avoid installing programs from untrusted sources, use unique passwords with a password manager and turn on two-factor authentication wherever possible. Limiting how much personal information is public online also reduces what automated tools can piece together.

The available details about VOLTA are limited, and further technical analysis of how it spreads and operates should clarify how widespread the threat is.