VOLTA Malware Steals Gmail and Discord Sessions, Then Uses AI to Build Detailed Victim Profiles

VOLTA malware steals session cookies and credentials from applications like Gmail and Discord, bypassing the need for passwords entirely by hijacking authenticated sessions. What makes this attack especially dangerous is its use of AI models to automatically analyze stolen data and rank victims by financial value and operational security posture, enabling attackers to prioritize high-value targets at scale. The malware is sold as a customizable builder, lowering the barrier for less sophisticated threat actors to deploy it. This matters because stolen session tokens grant immediate, persistent access to accounts without triggering password-based alerts, and AI-driven profiling dramatically accelerates post-compromise exploitation.