Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

The VOLTA infostealer represents a significant evolution in malware sophistication: it leverages Large Language Models to autonomously analyze stolen data, rank victims by financial value, and assess their security posture — all before human operators even review the haul. This AI-driven triage dramatically lowers the effort required by attackers to identify high-value targets and craft follow-on attacks. Organizations that store sensitive data without strong endpoint controls, data minimization practices, or behavioral monitoring are now at heightened risk of being prioritized by automated criminal intelligence. The use of LLM failover mechanisms also shows that attackers are building resilient, enterprise-grade tooling, raising the stakes for defenders who rely on reactive detection alone.