# Researchers document Windows malware that lets AI models choose attack actions

_Published Wednesday, September 23, 2026 at 4:22 PM EDT · Security, AI · Latest · Tier 2 — Notable_

![Researchers document Windows malware that lets AI models choose attack actions — Primary](https://www.gadgetreview.com/wp-content/uploads/This-Malware-Doesnt-Wait-for-Orders-scaled.jpg)

Cisco Talos has documented a Windows malware sample called CLOSEDQUORUM that asks up to four AI models to choose its next action after a system is compromised, Gadget Review reports. The implant sends information about the host to the models and executes the action that wins a plurality vote.

Its choices are limited to attack capabilities already built into the malware, including targeting credentials, browser passwords and cryptocurrency wallet data. The design does not require a human operator to issue each subsequent command. Talos has identified no confirmed victims or deployment in an active campaign.

## Sources

- [Gadget Review](https://www.gadgetreview.com/four-ai-chatbots-are-running-a-malware-operation-without-human-commands)

---
Canonical: https://techandbusiness.org/newswire/mNAarfTnz3szSUhMtQxTiG
Published: 2026-09-23T20:22:00.440Z
Story chronology: 2026-09-23T17:30:14.000Z
Retrieved: 2026-09-23T22:15:53.498Z
Publisher: Tech & Business (techandbusiness.org)