Short answer: A new malware called VOLTA uses AI to rank stolen data by financial value.
TL;DR
- VOLTA is a new infostealer malware.
- It uses AI to rank stolen data by value.
- Victims include banking, finance, and tech companies.
- It exfiltrates data in three stages.
- AI analysis helps prioritize victims.
What happened at VOLTA?
VOLTA is a new malware that uses artificial intelligence (AI) to rank stolen data by its financial value. It can steal passwords, payment card details, and other sensitive information from victims. The malware then uses AI to prioritize which victims are most valuable. This helps the attackers focus their efforts on the most profitable targets. It exfiltrates data in three stages and uses Telegram for communication.
- Malware
- Harmful software made to spy, steal or damage.
Key facts
| Reported by | The Hacker News |
|---|---|
| Date reported | 02 Nov 2026 |
How it works
VOLTA is a new malware that steals data from computers. It collects passwords, payment information, and other details. Then, it uses AI to rank the stolen data based on its value. This helps attackers decide what to steal next.
- Steals data from browsers and accounts
- Uses AI to rank data
- Finds home address and financial details
- Sends information to attackers via Telegram
Timeline
| Date | Event | Source |
|---|---|---|
| 2026-11-02 | Reported by The Hacker News | The Hacker News |
| 2026-11-02 | This Skillmate explainer published | Skillmate |
How to fix it
- If you have an account with the affected company, change that password and any reused copies of it.
- Turn on two-factor authentication (a second login step) wherever the service offers it.
- Expect phishing emails or calls that use the exposed details; verify requests through official channels.
How to detect it
VOLTA-AUTODOXER, a new infostealer, steals passwords, payment details, and personal data. Defenders should look for unusual logins, suspicious screenshots, and data exfiltration attempts.
Signs to watch for:
- Login alerts from new devices or locations on the affected account.
- Password-reset emails you did not ask for.
- Phishing messages that quote your real account details.
What is confirmed
- Reported by The Hacker News
Why it matters
This matters because it shows attackers are using advanced AI. This makes theft more targeted and harder to stop.
Learn the skills behind this story
Want to understand attacks like this and defend against them? Join Skillmate cybersecurity training or practise hands-on in Skillmate Labs.
FAQ
What does VOLTA do with the stolen data?
It uses AI to rank the data by financial value, creating a dossier for attackers.
How does VOLTA use AI?
VOLTA uses Anthropic’s Claude, Moonshot AI’s Kimi, and Google’s Gemini to rank the stolen data based on its value.
What is the main purpose of VOLTA?
The main purpose is to help attackers identify valuable targets by ranking stolen data based on its financial value.
Sources
- New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value (The Hacker News)
How we wrote this: facts come from the sources above. An on-prem AI model drafted the plain-English parts and every sentence was checked against the sources; unsupported sentences were removed. MITRE mapping is our own judgement.
