Cisco Talos discovers trojan VOLTA, which uses AI to analyze whether a victim is worth attacking
English text is being prepared.
The cybersecurity team Cisco Talos has discovered a new type of Windows malicious trojan named VOLTA. It collects data such as browsing history, cryptocurrency wallets, browser extensions, text documents, and chat records, and uploads them to online AI products such as Anthropic Claude to generate summaries, so that hackers can assess the value of the victim's information. After completing data collection and value assessment, VOLTA attempts to delete itself to reduce traces. Cisco Talos believes that this type of malware shows that AI is changing the way hackers operate, and may expose large institutions and executives to more precise attacks. Ordinary users' browsing history, spending habits, and social relationships may also be used for profiling analysis.
Why read this
AI score 62
The trojan disclosed by Cisco Talos hands victim data to online AIs such as Claude for value assessment, demonstrating a new way for attackers to screen targets.
Topics
Body
黑客研发新型恶意木马 VOLTA，用 AI 分析受害者是否值得入侵
2026-11-02 19:53 IT之家 - 漾仔
IT之家 11 月 2 日消息，据外媒 Tom's Hardware 报道，网络安全团队 Cisco Talos 发现了一款名为 VOLTA 的新型 Windows 恶意木马。该木马整合了 AI 模型，能够分析受害者的个人数据，评估其中的信息价值，并在完成相关操作后尝试自我删除，以降低被发现和追踪的风险。
据报道，VOLTA 能够收集受害者设备上的网页浏览记录、加密货币钱包、浏览器扩展程序、文本文档、聊天记录等各类敏感信息，并将相应文件上传至 Anthropic Claude 等在线 AI 产品分析生成摘要，以供黑客参考。在完成数据收集和价值评估后，VOLTA 便会尝试自行删除，以减少留下的攻击痕迹，增加安全人员调查和追踪的难度。
Cisco Talos 认为，这类恶意软件表明 AI 技术正在逐渐改变黑客行动方式，传统的大规模无差别攻击不仅容易暴露行踪，还需要投入大量时间等待潜在收益，最终回报也存在较大不确定性。相比之下，先收集数据、再利用 AI 评估目标价值的方式，有助于攻击者筛选更有利可图的目标，可能使大型机构及高管等群体面临更加精准的网络攻击风险。
不过，普通用户也不能因此掉以轻心。即使个人电脑中的文件缺乏直接的经济价值，浏览记录、消费习惯、生活轨迹及社交关系等信息仍可能被用于用户画像分析。攻击者可以借助 AI 从这些数据中挖掘个人偏好和潜在弱点，进而策划更具针对性的诈骗、社交工程攻击等恶意活动，进一步增加个人信息保护的难度。