ClosedQuorum malware delegates attack decisions to four AI models

Cisco Talos researchers analyzed a Windows implant called ClosedQuorum that uses Gemini, DeepSeek, Qwen and Mistral models to vote on post-compromise actions without instructions from a human operator. Its predefined options include stealing credentials and cryptocurrency wallets, injecting code and establishing persistence; a lateral-movement option exists but is not implemented in the analyzed build. Stolen data can be sent through a Discord webhook. Talos found placeholder API credentials and a dummy webhook in the sample and has not confirmed deployment in the wild, leaving open whether the software is an operational threat or an experiment.