This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup work from start to finish, and the public version of the malware does not work as it is.

Cisco Talos reported that CLOSEDQUORUM is designed to query up to four AI models and use their votes to select post-compromise actions, including theft of Windows credentials, browser passwords, and cryptocurrency wallet data. Talos has not observed the complete workflow operating successfully, and the public malware version is nonfunctional as provided. RealGround analysis: the case demonstrates AI agent abuse through delegated, model-driven malware decisions and highlights the need to assess agent authorization boundaries, tool execution logic, data exposure, and incident response controls.