# VOLTA Stealer’s Optional AI Stage Is Designed to Rank a Target’s Valuables

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/46232
Published: 2026-11-02T08:19:17.000Z
Updated: 2026-11-02T08:19:17.000Z
Section: Technology

> The Windows malware can collect wallet secrets and other personal data. Its use against real victims has not been established.

A Windows information stealer called VOLTA-AUTODOXER is designed to collect cryptocurrency wallet secrets and, through an optional AI stage, rank a victim’s valuables for an attacker.

Cisco Talos first saw the analyzed sample Oct. 11 at 8:46 a.m. ET (12:46 UTC) and published its analysis Oct. 31. The first-seen date marks Talos’ observation of this sample, not a confirmed infection. Its use against real victims has not been established.

VOLTA can gather wallet seed phrases, browser credentials, saved payment card data and account sessions. It also contains a tool that attempts to crack stored wallet vaults. The findings do not establish that the tool opened a real victim’s vault.

Using a stolen account session, the stealer can search email receipts and food delivery records for details about the person behind a compromised computer. Those details can become part of a victim profile. The optional AI stage is designed to sort information collected by the stealer after that collection takes place.

When enabled, VOLTA is designed to send the profile through OpenRouter for an assessment. Its default model is Anthropic’s Claude Opus 4.6. If a response contains a refusal, the configuration can turn to Moonshot AI’s Kimi K2 and then Google’s Gemini 2.5 Flash.

The request asks the model to place valuables in low, medium and high tiers based on their potential value to an attacker. It also asks for an assessment of the victim’s security practices. The model sequence describes how the sample is configured; it does not establish that any of the services assessed a real victim.

“The model is the operator’s triage analyst,” wrote Ryan Fetterman, a Cisco Talos security researcher. The stealer can operate without the AI stage, so wallet and credential exposure does not depend on a model producing an assessment.

For a crypto holder, a plaintext seed phrase stored on an infected computer should be treated as compromised. Funds held in that wallet should be moved to a new wallet generated offline.