CLOSEDQUORUM Windows AI-model-voting malware
Malware Activity
Summary
Hide ▲
Show ▼
The CLOSEDQUORUM malware now uses votes from up to four AI models to choose steal, inject, persist, or move actions, replacing a normal attacker C2 flow on Windows systems. The design can support credential theft, saved browser-password theft, and crypto wallet theft, while sending stolen data to Discord. The public sample is incomplete, but the behavior shows an early malware design that pushes command selection into commercial AI services. That shift raises the risk of more autonomous theft and persistence decisions once the code is fully operational.
Related Happenings
Cisco Talos releases CAIRN open-source tool for hunting malware that uses AI services
Security Tool/Service
H score11
First: 23.09.2026 17:17
Last: 23.09.2026 17:17
Sources 1
How related:
Talos found the malware with CAIRN, an open-source tool it released the same day to hunt for malware that uses AI services.
About this happening:
Cisco Talos released CAIRN, an open-source tool that hunts malware that uses AI services, adding a new detection capability for implants that route decisions through c...
Cisco Talos releases CAIRN open-source tool for hunting malware that uses AI services
Security Tool/ServiceHow related: Talos found the malware with CAIRN, an open-source tool it released the same day to hunt for malware that uses AI services.
About this happening: Cisco Talos released CAIRN, an open-source tool that hunts malware that uses AI services, adding a new detection capability for implants that route decisions through c...
X47.c Windows botnet offering AI API-draining and credential-theft tooling
Malware Activity
H score28
First: 23.09.2026 17:00
Last: 23.09.2026 17:00
Sources 1
About this happening:
The previously undocumented x47.c Windows botnet now appears in a seller offering 18 attack methods, including an AI API drain command that can burn paid credits a...
X47.c Windows botnet offering AI API-draining and credential-theft tooling
Malware ActivityAbout this happening: The previously undocumented x47.c Windows botnet now appears in a seller offering 18 attack methods, including an AI API drain command that can burn paid credits a...
ClosedQuorum AI-driven Windows post-compromise malware activity
Malware Activity
H score28
First: 22.09.2026 21:04
Last: 22.09.2026 21:04
Sources 1
About this happening:
The ClosedQuorum Windows malware now uses Google Gemini, DeepSeek, Qwen, and Mistral AI to automate post-compromise attack decisions, increasing the speed and...
ClosedQuorum AI-driven Windows post-compromise malware activity
Malware ActivityAbout this happening: The ClosedQuorum Windows malware now uses Google Gemini, DeepSeek, Qwen, and Mistral AI to automate post-compromise attack decisions, increasing the speed and...
Bandcampro's Gemini CLI-run disposable C&C model for AI-assisted cybercrime
Threat Actor Meta
H score36
First: 20.07.2026 12:07
Last: 20.07.2026 12:07
Sources 1
About this happening:
Researchers found bandcampro outsourcing botnet and C&C operations to Google Gemini CLI, turning core operator work into a more disposable and replicable AI-as...
Bandcampro's Gemini CLI-run disposable C&C model for AI-assisted cybercrime
Threat Actor MetaAbout this happening: Researchers found bandcampro outsourcing botnet and C&C operations to Google Gemini CLI, turning core operator work into a more disposable and replicable AI-as...
Y2K Operators Millenium RAT social-engineering distribution campaign
Campaign
H score73
First: 29.06.2026 17:30
Last: 29.06.2026 17:30
Sources 1
About this happening:
The Y2K Operators are running a social-engineering distribution campaign that spreads Millenium RAT through booby-trapped downloads, exposing users to remote compr...
Y2K Operators Millenium RAT social-engineering distribution campaign
CampaignAbout this happening: The Y2K Operators are running a social-engineering distribution campaign that spreads Millenium RAT through booby-trapped downloads, exposing users to remote compr...
Timeline
-
23.09.2026 17:17 2 articles · 2h ago
CLOSEDQUORUM uses AI model votes to choose Windows malware actions
Initial DisclosureCLOSEDQUORUM is a Windows malware strain that takes orders from a vote among up to four AI models—DeepSeek, Qwen, Mistral, and Google Gemini—instead of an attacker-run C2 server. The malware chooses among steal, inject, persist, and move, posts each decision and the model rationale to a Discord channel through a webhook, and sends stolen data to the same channel. The steal path targets LSASS memory, saved passwords from Chrome, Edge, and Firefox, and wallet data from MetaMask, Exodus, and Ethereum. The public sample is incomplete, with placeholder API keys and a placeholder Discord webhook that prevent it from reaching the models or exfiltrating data as intended.
Show sources
- This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move — thehackernews.com — 23.09.2026 17:17
- This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move — thehackernews.com — 23.09.2026 17:17