Stolen Logs Now Arrive Ranked: VOLTA and Automated Victim Triage
A Gaming PC Found Your Front Door
In October 2026 Cisco Talos analyzed VOLTA, Windows malware that steals credentials and sessions, confirms a home address from the victim's own email receipts and has an AI model rank what the person is worth. This brief asks how automated triage changes infostealer risk, why a child's gaming PC or an assistant's laptop can expose a principal, and what an incident response must cover. Built from Talos analysis and related research. For principals, family offices and security teams.
Unlock this Command Brief.
Get this assessment, the full subscription collection, and new intelligence as it is published.
For your first year, then $100/month. Or $750 for the first year, then $1,000 annually.
- The CORGI Morning Brief, each morning
- This brief and the subscription collection, 90+ briefs
- New Command Briefs as they are released
- Principal and Analyst briefs, as PDF
Secure checkout through Substack. Substack asks for your email first.
How it happens
Automated target triage
Tools rank compromised or listed people by value so attention goes to the most profitable or reachable, ending safety in numbers.
More on infer and profile →- Mechanism · Breach and custodyEndpoint credential theft. Malware on a household endpoint takes credentials, sessions and files.
- Mechanism · LocateAddress resolution. A name or other identifier is resolved to a home address through people-search, broker or similar commercial lookups.