New VOLTA Infostealer Targets Browser Passwords and Crypto Wallets
The VOLTA malware family has been updated with new evasion techniques and is being distributed via fake software cracks on Discord.
Threat intelligence firm Recorded Future has published a report on the VOLTA infostealer, a credential-stealing malware being distributed through fake software activation tools posted in Discord servers and gaming forums.
VOLTA targets saved passwords in Chrome, Firefox, Edge, and Brave, as well as browser-stored cryptocurrency wallet extensions. The latest variant includes a new technique to bypass Windows Defender's real-time protection.
Users are advised to avoid downloading software from unofficial sources and to use a real-time antivirus solution that uses cloud-based detection rather than signature-only scanning.