VOLTA Infostealer Artifact Staging and Archiving

Kaung Khant Ko@kaungkhantko

•updated today•0•0•0

Detects a sequence of actions where a non-standard process accesses sensitive system artifacts (such as .gitconfig, screenshots, or mobile device backups) followed by the creation of a staged archive named 'volta_log.zip' within 30 minutes, indicative of the VOLTA infostealer's collection and staging behavior.