ainotis Join
My notis

Checked fact 33992 Nov 2026Safety and security

Talos says VOLTA checks each response for refusal phrases such as I can't and I'm not able and moves to the next model in the chain when it finds one, and that the LLM stage can be skipped entirely if no API key is present.

The exact words it rests on

the ability to run without the LLM stage altogether if no key is present

What the source said when we opened it, on 2 Nov 2026.

The source

Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
Cisco Talos · 2026-10-31

Checked

Checked by the notis newsroom on , against the source above.

In the story

Cisco Talos reports VOLTA infostealer sends an evidence bundle to Claude Opus 4.6 by default to rank assets 2 Nov 2026

Cite this fact

Anyone may quote this address. It does not change; if we correct the story, this page says so.