This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Talos analyzed CLOSEDQUORUM, Windows malware that lets up to four AI models vote on its next action.
68
Malware
LAMEHUG
- Mentions · 7d0
- Mentions · 30d0
- All mentions5
- First seenAug 26, 2026
- Last mentionedSep 23, 2026
Timeline
5 articles · newest firstA New Tool for Tracking AI Malware Uncovers Malware That Operates Without Human Control
Cisco Talos releases CAIRN to track AI malware and documents CLOSEDQUORUM, an unconfirmed Windows implant steered by LLMs.
66
Researchers uncover malware that uses AI to choose its next move
Cisco Talos documents CLOSEDQUORUM, a Windows implant that lets commercial LLMs vote on its next action.
66
A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight
New tool uncovers CLOSEDQUORUM, malware using a hive-mind of four LLMs for autonomous command-and-control decisions.
70
The AI Malware Maturity Gap
Recorded Future introduces AIM3, a five-level maturity model for AI malware, showing current attacker AI use is mostly AI-assisted rather than autonomous.
55
Appears with
- Geminiai model · 5
- CLOSEDQUORUMmalware · 4
- DeepSeekai model · 4
- Qwenai model · 4
- Mistralai model · 4
- Cisco Talosorganization · 4
- CERT-UAorganization · 3
- CAIRNproduct · 3
- Ciscovendor · 2
- Googlevendor · 2
- Windowsproduct · 2
- Exodusproduct · 1
- Microsoft Edgeproduct · 1
- Malterminalmalware · 1
- Discordproduct · 1
- Recorded Futurevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.