VOLTA malware asks AI which victims are worth the most
VOLTA was first seen on 11 October 2026. If Claude refuses to answer, it switches to Kimi K2, then to Gemini 2.5 Flash.
Jump to a section
Picture a thief who has just copied everything from someone's computer. They have the passwords the owner let the browser remember, the cards typed in while shopping online, chat and gaming accounts, and a crypto wallet. The thief's next question is which of these will make the most money, and whether this victim is worth the time at all. Sorting a haul like that used to mean a person reading through it file by file.
Now a program hands that job to AI. On 31 October 2026, Cisco Talos, the threat research team at Cisco, published its analysis of malware called VOLTA, Windows malware first seen in a sample on 11 October. Once it has stolen the data, it sends the victim's file to Claude Opus 4.6, an AI model made by Anthropic, to write an assessment of what that victim owns, ranked from most to least valuable.
VOLTA takes passwords, cards and crypto wallets
VOLTA is an infostealer, a program that steals data. It does not lock the computer or show a ransom note to warn the owner; it quietly collects what is saved on the machine and sends it out. Its list is long: passwords, cookies and saved cards from Chrome-family browsers and Firefox, Outlook, Slack, Discord, Telegram, Steam and Roblox accounts, Wi-Fi passwords, screenshots and crypto wallets, with a built-in password guesser to open wallets locked with a password.
A cookie here is a small file that lets a website remember you are logged in, and anyone who has it may get into your account without knowing the password. What sets VOLTA apart from ordinary infostealers is that it uses the stolen accounts to dig further. It opens the victim's Gmail to look for receipts from shops such as Amazon, Walmart and PayPal to confirm a home address, pulls order history from food delivery apps and checks the value of items in the game Roblox. All of it goes into one file about one victim.
If Claude refuses, it asks the next AI
That file is sent to OpenRouter, a go-between service that passes requests to AI models from many companies in one place. The first model VOLTA is set to use is Claude Opus 4.6. The instructions tell the AI to play an analyst writing a target assessment. One section ranks the victim's valuables as low, medium or high by how easily they can be sold or turned into money. Another judges how careful the victim is and what kind of passwords they use.
The program's author planned for the AI to say no. If the answer contains a refusal such as "I can't", the program switches to Kimi K2 from Moonshot AI, a Chinese AI company, and if that fails, to Google's Gemini 2.5 Flash, three models in all. Every request leaves from the victim's own computer, over the victim's internet connection. The AI step is optional: if the person running VOLTA has not added an API key, the code that lets a program call an AI service, the step is skipped and the program steals data as usual.
Talos said VOLTA is probably sold as a build-to-order product: the author sells access, the customer picks the settings and gets a program built just for them. If so, a buyer with no technical skill at all would receive ranked reports on victims in their own Telegram. When it is done, the program also deletes itself, which makes it harder for the computer's owner to find any trace.
AI takes over the work thieves used to do themselves
The point Talos made in its conclusion is that the AI in this program does not break into computers faster or in greater numbers. What it takes on is the step that used to cost people the most time: reading through the haul and deciding which victim is worth it. Think of someone who has picked a whole pile of wallets, each stuffed with cards, receipts and business cards. The thief once had to open them one by one. Now an assistant tips out the pile and hands over a list of which to use first.
There are limits worth knowing. Talos analysed the program from a single sample. It did not say how many people were infected or how the malware spreads, and it did not confirm that any thief has used the AI reports to rob real victims. Gridinsoft, a security company that analysed the case further, also said there is no victim count yet. What is certain is that someone has built a tool like this, and it calls the same AI models that ordinary people use every day.
If you saved a crypto recovery phrase on your computer, move the funds
The most exposed item in this story is the seed phrase, or recovery phrase: the list of words a crypto wallet gives you when you create it. Anyone who has those words can move everything out of the wallet from any device. If you ever typed the phrase into a note or document on your computer, Talos advised treating the wallet as fully compromised and moving the funds to a new wallet whose phrase was created on a device that has never been online.
For other accounts, Talos advised revoking logins that may have leaked and changing passwords. Gridinsoft added a step people often miss: change passwords from a different, clean device, not from the one you suspect is infected, and start with your main email, because email is usually how other accounts reset their passwords. Logging out of every device after changing a password also stops stolen cookies from working.
This weekend, on Saturday 7 or Sunday 8 November, look through the folders on your computer and your notes app for any file that holds a recovery phrase or passwords as plain text. If you find one, follow the steps above, then tighten your crypto and banking apps with the six settings SV News gathered earlier, such as using an authenticator app instead of SMS and setting a list of addresses you can withdraw to.
FAQ
How does VOLTA get onto a computer?
No one can say yet. Talos did not describe how it spreads, and Gridinsoft wrote that no single lure used every time has been identified.
Can phones or Macs be infected?
The sample Talos analysed is a Windows program, and neither source mentions a version for phones or Macs.
Is Claude really helping the thieves?
VOLTA sets Claude Opus 4.6 as its first model and is ready to switch to Kimi K2 and Gemini 2.5 Flash when a model refuses. Talos did not say how often each model answered or refused.
What should I do first if I think my computer is infected?
Gridinsoft advises keeping that computer away from important tasks, scanning it with a trusted anti-malware tool, then changing passwords from another device, starting with your main email. If you kept a crypto recovery phrase on the computer, move the funds to a new wallet.
