A new Windows infostealer called VOLTA does more than steal passwords. After it grabs Gmail, Discord and other logins, it asks an AI model to study the loot and write a report on how much the victim is worth.

The idea is simple: steal everything, then let AI sort it out. The malware calls itself “VOLTA-AUTODOXER.” It deletes itself after running, which makes it harder to find. It is also a sign of where cybercrime is heading.

Criminals have already tried AI for victim sorting, as in the Dolphin X AI profiler reported earlier this year, but VOLTA pushes the idea further by using a commercial AI service as its analyst.

Researchers at Cisco Talos noted the malware after it surfaced through their CAIRN research effort, which looks for hacking tools that use AI.

Talos published its findings on October 31, 2026, and wrote that VOLTA is a mature stealer with an optional AI layer added at the end. Talos also did not track whether VOLTA has been used in the wild, according to WIRED.

VOLTA Malware Steals Gmail and Discord Sessions, Then Uses AI

VOLTA starts like most stealers. It pulls saved passwords, cookies and payment cards from Chromium-based browsers.

It also hits Firefox, Thunderbird, Outlook, Slack, Steam, Battle.net, Telegram, Roblox and Discord. It takes Microsoft OAuth tokens, SSH keys, cloud-provider files and saved Wi-Fi passwords too, and it can crack crypto wallet vaults on the spot.

The second stage is what sets it apart. Using the victim’s own logged-in Gmail session, VOLTA searches the inbox for receipts from Amazon, DoorDash, Uber Eats, Grubhub, Walmart and PayPal.

The VOLTA-AUTODOXER workflow (Source - Cisco Talos) — The VOLTA-AUTODOXER workflow (Source – Cisco Talos)

These receipts help it confirm the victim’s home address. It also calls stolen Uber Eats and DoorDash sessions to read order history, and it reuses the Discord token to fill in the account profile.

A live Rolimons lookup puts a price on any Roblox items. Session theft like this is not new, and an older stealer, FleshStealer harvesting Discord tokens, showed how a stolen token can give an attacker lasting access.

Stolen sessions matter because they can skip passwords and sometimes two-factor prompts. The attacker simply acts as the logged-in user.

Talos says much of VOLTA’s token theft depends on getting around Chrome’s App-Bound Encryption. Chrome added that feature to protect cookies, but infostealers have been finding ways around Chrome’s cookie protection since it launched.

How the AI Builds the Victim Profile

VOLTA saves everything it learns into a file called Identity_Report.txt. The file includes location, home address, employer, an estimated birth year, the last four digits of cards and Slack workspaces.

It sends this file to OpenRouter, an AI gateway, with instructions to act as “a forensic intelligence analyst drafting a target assessment”.

The reply must include a section called “WHAT THEY’RE WORTH,” which ranks valuables as low, medium or high. A second section, “THEIR OPSEC,” judges the victim’s password habits and security level.

The default model is Claude Opus 4.6. If that model refuses the request, VOLTA tries Kimi K2 and then Gemini 2.5 Flash. It checks replies for phrases like “I can’t” to spot a refusal. The temperature is set low, at 0.2, to keep answers steady and accurate.

The AI call runs from the victim’s own computer and network. The results come back as AI_Analysis.txt, and both files leave in a zip called volta_dox.zip. Talos believes VOLTA is sold as a builder.

Three stages (Source - Cisco Talos) — Three stages (Source – Cisco Talos)

Each buyer fills in six slots, such as a Telegram channel and API keys, and gets a custom build. The buyer then gets ranked reports in Telegram.

No attacker-owned servers were seen, so defenders cannot simply block one command server. Similar builder-style tools, like this Python MaaS infostealer builder, already let low-skill criminals run large theft campaigns.

Talos suggests blocking Chrome from starting with the –headless flag unless a known developer process launches it. Users who suspect an infection should keep the %APPDATA%\volta_debug.txt log, which shows what was taken.

They should also revoke tokens and reset passwords from a clean device, and move crypto funds to a new wallet if the seed phrase sat in plain text.

Indicators of compromise (IoCs):-

Type	Indicator	Description
SHA-256	57ef4242666d78c50df145b34023df564f0fad38812d6a580e66433d427e2279	VOLTA sample (PE32+ x86-64)
Filename	9BY0tjwOc3ut.exe / yLP9m5J3i2Aw.exe	Sample file names
PE Timestamp	2026-08-17 20:35	Compile time
First Seen (UTC)	2026-10-11 12:46	First sighting
URL	https[:]//openrouter[.]ai/api/v1/chat/completions	AI endpoint (third-party service)
Models	anthropic/claude-opus-4.6; moonshotai/kimi-k2; google/gemini-2.5-flash	Default and fallback models
File	%APPDATA%\volta_debug.txt	Harvest log
File	Identity_Report.txt / AI_Analysis.txt	Victim data and AI output
Archives	volta_log.zip; volta_dox.zip; volta_doxnet.zip	Exfiltration packages
Domain	Rolimons[.]com	Roblox value lookup

Note: IP addresses and domains are intentionally Qdefanged (e.g., [.]) to prevent accidental resolution or hyperlinking. Re-fang only within controlled threat intelligence platforms such as MISP, VirusTotal, or your SIEM.

Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs.

The post VOLTA Malware Steals Gmail and Discord Sessions, Then Uses AI to Build Detailed Victim Profiles appeared first on Cyber Security News.