Local AI Model Modifies Windows Credential Dumper to Bypass EDR Detection
A local uncensored Qwen model revised an LSASS dumper until two lab EDRs no longer detected it.
64
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 23, 2026
- Last mentionedSep 26, 2026
Timeline
2 articles · newest firstResearchers Find Malware That Uses AI Models Instead of Human Hackers for Control
Researchers find CLOSEDQUORUM, a Windows malware that uses commercial LLMs as an autonomous decision engine for post-compromise actions like credential theft.
65
Appears with
- Cisco Talosorganization · 1
- Anthropicorganization · 1
- Nvidiavendor · 1
- Elasticvendor · 1
- Anthropicvendor · 1
- criminal-forumthreat actor · 1
- DeepSeekvendor · 1
- Edgeproduct · 1
- Windowsvendor · 1
- Claude Opus 4.8ai model · 1
- MetaMaskproduct · 1
- DeepSeekai model · 1
- Qwen 3.8 27Bai model · 1
- Chromeproduct · 1
- Microsoftvendor · 1
- Firefoxproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.