This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

Executive Summary

Cisco Talos describes CLOSEDQUORUM, Windows malware designed to take orders from a vote of up to four AI models instead of a C2 server, choosing whether to steal credentials, browser passwords and wallet data; Talos has not seen it work end to end.

What Happened

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup work from start to finish, and the public version of the malware does not work as it is.

Affected Products

Windows

Vulnerability / Attack Technique

Malware directed by votes of multiple AI models

Technical Mechanism

Instead of a command server, the malware asks up to four AI models to vote on its next action from options such as credential and wallet theft.

AI Security Category

AI-assisted attack

Part of the AI-Assisted Attacks topic.

Relevant Frameworks

MITRE ATLAS: Credential Access

RealGround Analysis

Malware authors are experimenting with LLMs as a replacement for C2. RealGround analysis: outbound calls to AI APIs from endpoints are worth monitoring.

Recommended Controls

Alert on AI API calls from processes that should not make them
Protect browser password stores and wallet files

Related RealGround Service

AI Security Readiness Assessment · or start with the free AI Agent Security Scanner.

Sources

thehackernews.com: https://thehackernews.com/2026/09/windows-malware-is-built-to-let-up-to.html

Summary and analysis written by RealGround from the source above; last updated 2026-10-17.