This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Talos analyzed CLOSEDQUORUM, Windows malware that lets up to four AI models vote on its next action.
Cisco Talos describes CLOSEDQUORUM, Windows malware that asks up to four AI models—DeepSeek, Qwen, Mistral, and Gemini—to vote on steal, inject, persist, or move, then runs the majority choice. Steal dumps LSASS, copies Chrome, Edge, and Firefox passwords, and collects MetaMask, Exodus, and Ethereum wallet data, sending results through a Discord webhook. Talos has not seen the full chain work, and public builds contain placeholder API keys. The code dates to at least June 17, 2026; Talos published Snort rule 1:66984, YARA logic, six SHA-256 hashes, and the CAIRN hunting tool.
- DeepSeek, Qwen, Mistral, and Gemini vote on steal, inject, persist, or move.
- Steal dumps LSASS, copies browser passwords, and collects crypto-wallet data.
- Public builds have placeholder keys and webhooks, so they do not function.
- Talos published Snort SID 1:66984, YARA logic, six hashes, and CAIRN.
- Watch combined AI-provider traffic, LSASS access, injection, and WMI persistence.
- ATT&CK
- T1003.001 OS Credential Dumping: LSASS MemoryT1555.003 Credentials from Web BrowsersT1055.004 Process Injection: Asynchronous Procedure CallT1547.001 Registry Run Keys / Startup FolderT1546.003 Windows Management Instrumentation Event Subscription
- Malware
- CLOSEDQUORUMLAMEHUG
- Organizations
- Cisco TalosCERT-UA
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| sha256 | 250d4fa37488af9b025333fa17705573d721467b203765bc360890b4f5a90cd7 | es for six builds from the malware's development: SHA-256 : 250d4fa37488af9b025333fa17705573d721467b203765bc360890b4f5a90cd7 SHA-256 : c4dc171f2513fcaf9d5ecc815a94aee4063b213ab380f80bd |
| sha256 | 5191cf625dfc209a347f137b50aea199e82040fd5ee9086fb3e2de73c133f3cb | 93800ab6ccf21b3e60bd0730f300b4595fe74a33adc17a63c SHA-256 : 5191cf625dfc209a347f137b50aea199e82040fd5ee9086fb3e2de73c133f3cb SHA-256 : eddbd0ecf7195d38fefae5b9d393abfa79e6f3f94bde19308 |
| sha256 | c13cea04f598e2b0c248d603a6e31bd13aabb64d8149c1b6a77b64e0b983a86f | f9d5ecc815a94aee4063b213ab380f80bd3ac422dee5205a7 SHA-256 : c13cea04f598e2b0c248d603a6e31bd13aabb64d8149c1b6a77b64e0b983a86f SHA-256 : f5f1f8c3e7b883793800ab6ccf21b3e60bd0730f300b4595f |
| sha256 | c4dc171f2513fcaf9d5ecc815a94aee4063b213ab380f80bd3ac422dee5205a7 | b025333fa17705573d721467b203765bc360890b4f5a90cd7 SHA-256 : c4dc171f2513fcaf9d5ecc815a94aee4063b213ab380f80bd3ac422dee5205a7 SHA-256 : c13cea04f598e2b0c248d603a6e31bd13aabb64d8149c1b6a |
| sha256 | eddbd0ecf7195d38fefae5b9d393abfa79e6f3f94bde19308ecef130a05a42e5 | a347f137b50aea199e82040fd5ee9086fb3e2de73c133f3cb SHA-256 : eddbd0ecf7195d38fefae5b9d393abfa79e6f3f94bde19308ecef130a05a42e5 Other traces the malware would leave on a computer include: |
| sha256 | f5f1f8c3e7b883793800ab6ccf21b3e60bd0730f300b4595fe74a33adc17a63c | 0c248d603a6e31bd13aabb64d8149c1b6a77b64e0b983a86f SHA-256 : f5f1f8c3e7b883793800ab6ccf21b3e60bd0730f300b4595fe74a33adc17a63c SHA-256 : 5191cf625dfc209a347f137b50aea199e82040fd5ee9086fb |
From the original article
4 min read at thehackernews.com
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup work from start to finish, and the public version of the malware does not work as it is.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.