Researchers Find Malware That Uses AI Models Instead of Human Hackers for Control
Researchers find CLOSEDQUORUM, a Windows malware that uses commercial LLMs as an autonomous decision engine for post-compromise actions like credential theft.
65
AI model
Google Gemini
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 11, 2026
- Last mentionedSep 23, 2026
Timeline
4 articles · newest firstCyberthreats are moving faster than SMBs: Readiness must accelerate
ESET's SMB Cyber Readiness Index 2026 finds 73% of SMBs adopting AI while 40% lack AI policy, and reports 3,000+ malicious AI agent skills.
25
Chinese espionage groups swarm to exploit triple-link chain of zero-days
Four China-aligned espionage groups, starting with TA412/APT31, chained zero-days CVE-2026-85046, CVE-2026-87491 and CVE-2026-85880 to spy on targets since late August.
85
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers
Security researchers hired three suspected North Korean IT workers at a fake DeFi startup, documenting forged IDs, AI-edited images and post-hire system access.
55
Related CVEs
by mentions- CVE-2026-874914%8.8Actively Exploited Out-of-Bounds Write in Google Chrome V8
- CVE-2026-850462%8.8Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
Appears with
- Lazarus Groupthreat actor · 1
- Violet Typhoonthreat actor · 1
- PromptSpymalware · 1
- DEF CONorganization · 1
- UNK_LateNightthreat actor · 1
- ESETorganization · 1
- UNK_DoubleCheckthreat actor · 1
- Proofpointorganization · 1
- PromptSpyproduct · 1
- criminal-forumthreat actor · 1
- MetaMaskproduct · 1
- AstrillVPNproduct · 1
- OWASPorganization · 1
- DeepSeekai model · 1
- Microsoft Windowsproduct · 1
- Qwenai model · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.