AIBleepingComputerabout 1 hour ago
ClosedQuorum malware uses AI models for attack decisions
3 min read
Cisco Talos found ClosedQuorum, a Go-based Windows malware that uses Google Gemini, DeepSeek, Qwen and Mistral to autonomously choose post-compromise actions. A voting system picks between credential theft, shellcode injection and persistence, with DeepSeek breaking ties. Stolen data goes to operators via Discord webhook. Talos calls it the first documented Windows implant delegating tactical command decisions to AI models.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
