CLOSEDQUORUM, the malware that asks four AI models what to do next
Cisco Talos says CLOSEDQUORUM lets four commercial AI models vote on credential and wallet theft.
Cisco Talos documented CLOSEDQUORUM, a Windows implant that sends host context to DeepSeek, Qwen, Mistral, and Google Gemini and executes the majority vote among steal, inject, persist, or move. The steal path dumps LSASS credentials, saved passwords from Chrome, Edge, and Firefox, and wallets such as MetaMask and Exodus, then exfiltrates AES-256-GCM data through a Discord webhook. The public sample is inert with placeholder API keys, while development builds embed real credentials. Talos found it with the CAIRN toolkit and linked artifacts to carding-forum posts from 2025.
- CLOSEDQUORUM polls DeepSeek, Qwen, Mistral, and Gemini, then takes the majority action.
- Choices are steal, inject, persist, or move; ties break toward DeepSeek.
- Steal dumps LSASS, browser passwords, and MetaMask or Exodus wallets.
- Stolen data is AES-256-GCM encrypted and sent through a Discord webhook.
- The public sample uses placeholder keys; artifacts link to 2025 carding posts.
- ATT&CK
- T1003.001 LSASS MemoryT1555.003 Credentials from Web BrowsersT1055 Process InjectionT1567.004 Exfiltration Over WebhookT1102 Web Service
- Malware
- CLOSEDQUORUM
- Organizations
- Cisco Talos
From the original article
5 min read at securityaffairs.com
Cisco Talos finds CLOSEDQUORUM, malware that lets four commercial AI models vote on its next move, with no human operator required. Cisco Talos found malware, dubbed CLOSEDQUORUM, that holds a vote before deciding what to steal from you. Four AI models vote on its next move, without any human interaction.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.