What we know

6 language model. The malware uses Claude to rank the stolen assets by their potential monetization value. After analyzing the data, VOLTA deletes itself to avoid detection. It can also switch to alternative AI models if Claude refuses to process the stolen information, allowing it to adapt to different environments or defenses. 6 to assess asset value. The malware self-deletes after completing its data analysis. It can switch between AI models if one declines to process the data.

Why it matters

This malware demonstrates how cybercriminals are increasingly integrating large language models (LLMs) into their operations to automate and refine the exploitation of stolen data. By using AI to prioritize valuable assets, attackers may improve the efficiency and profitability of their campaigns. The ability to self-delete and adapt by switching AI models also indicates a higher level of sophistication aimed at evading detection and maintaining operational flexibility.

What is still unknown

Details on the accuracy of the AI-driven analysis and which languages the malware supports remain unclear. There is no information on how widely VOLTA has been deployed or when it first appeared. 6 for asset ranking.