Cisco Talos

Malware uses LLMs to rank victims by how much they’re worth

The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to profile victims and rank their most valuable assets.