Checked fact 34012 Nov 2026Safety and security
Talos lists the initial theft as browser passwords, cookies and saved payment cards from Chromium browsers; Firefox, Thunderbird and Outlook data; Slack, Steam, Battle.net, Discord, Telegram and Roblox sessions; Microsoft OAuth tokens; SSH and cloud configuration files; screenshots; and cryptocurrency wallets.
The exact words it rests on
It hits Firefox and Thunderbird, Outlook profiles, Slack workspaces, Steam and Battle.net sessions
What the source said when we opened it, on 2 Nov 2026.
The source
Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
Checked
Checked by the notis newsroom on , against the source above.
In the story
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.