What is ClosedQuorum?

ClosedQuorum

mediumMalware

Cisco Talos Analyzes Novel Windows Malware CLOSEDQUORUM with AI Model Voting Mechanism

Cisco Talos researchers have analyzed a new Windows malware strain designated CLOSEDQUORUM. The malware is designed to route malicious actions through a voting mechanism involving up to four AI models rather than a traditional attacker-controlled command-and-control server. Reported capabilities include the theft of Windows credentials, saved browser passwords, and cryptocurrency wallet data. Talos has not observed the full attack chain functioning end-to-end, and the public version of the malware does not operate as intended.

The Hacker News5 days ago1 min read

mediumMalware

New ClosedQuorum Windows Malware Leverages AI Models for Post-Compromise Decisions

A newly identified Windows malware strain, ClosedQuorum, has been reported to integrate multiple large language models—including Google Gemini, DeepSeek, Qwen, and Mistral—to autonomously determine actions during the post-compromise phase of cyber attacks. Reported by BleepingComputer on September 22, 2026, the malware represents a convergence of AI capabilities and traditional threat infrastructure. The specific distribution method and technical verification of AI model integration remain unconfirmed, but the report highlights a potential evolution in malware adaptability and decision-making autonomy.

BleepingComputer6 days ago1 min read

ClosedQuorum

Quick answers

Related Articles

Cisco Talos Analyzes Novel Windows Malware CLOSEDQUORUM with AI Model Voting Mechanism

New ClosedQuorum Windows Malware Leverages AI Models for Post-Compromise Decisions