Experiencing an issue? Submit a support ticket.
The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to profile victims and rank their most valuable assets. Learn More
Adversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed abuse of more than 25 legitimate platforms over the past year, exploiting the built-in trust of collaboration, file-sharing, payment and other services to reach their targets. Learn More
Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy. Learn More
Evolve your incident response with intelligence-led proactive services and deep expertise that only Talos can offer, before –and during– an active emergency. Anyone can stand behind you – Talos IR stands beside you, every step of the way.
Together, we can reduce downtime and mitigate risk. Get started today.
Attackers have always had a bottleneck. Stealing massive amounts of data is easy, but identifying which victims are truly worth the effort can be slow, tedious work. That changed with the discovery of the VOLTA-AUTODOXER.In this episode, Amy chats with Ryan Fetterman, creator of the CAIRN research framework, to break down a newly discovered infostealer. Unlike traditional stealers, VOLTA integrates LLMs to analyze stolen credentials in real-time, effectively turning raw data into a prioritized, high-value dossier for the attacker. We discuss:How VOLTA uses session replay to go beyond simple password theft and into your personal Gmail inbox and DoorDash order historiesThe unsettling way attackers are outsourcing analytical work to AI to rank victims by their potential monetization valueThe multi-model resilience that allows this stealer to bypass AI safety refusalsPractical steps for defenders and individuals to harden their defensesResources:Read the full research blog: https://blog.talosintelligence.com/appraisal-by-ai-model-driven-victim-prioritization-in-the-volta-infostealerWIRED coverage: https://www.wired.com/story/kernel-panic-volta-autodoxer-ai-infostealer-malware/Learn more about CAIRN: https://blog.talosintelligence.com/introducing-cairn-frontier-tracking-for-ai-integrated-malware/
Network segmentation is a fundamental security practice, yet many organizations struggle to move past the conceptual stage. Craig Jackson from Talos IR joins Amy to explain how to build a segmentation strategy that serves both as a preventative barrier and a functional tool for incident response.We also cover the rising industry interest in AI kill switches, looking at how security teams can plan to stop erratic AI applications or AI-augmented malware before they cause widespread operational damage.The Fine Art of Frustrating the Adversary: https://blog.talosintelligence.com/the-fine-art-of-frustrating-the-adversary/
Talos is Cisco's threat intelligence research organization, an elite group of security experts devoted to providing superior protection for our customers, products and services.
Our job is your defense.
Talos powers the Cisco portfolio with comprehensive intelligence.
Every customer environment, every event, every single day, all around the world.