This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

Cisco Talos identified a novel Windows malware named CLOSEDQUORUM that leverages commercial AI models—DeepSeek, Qwen, Mistral, and Google Gemini—to make autonomous decisions on attack actions through a voting mechanism. The malware performs credential theft, code injection, persistence, and lateral movement based on consensus from AI models, with decisions logged and data exfiltrated via a Discord webhook. While the public version is non-functional due to placeholder API keys and webhook URLs, the malware represents a new paradigm in AI-driven threats. Indicators include specific behaviors such as AI service queries from non-AI applications, LSASS memory dumping, process injection, and WMI-based persistence with Windows Update-themed names.

AI-extracted · verify before operational use