AIThe Registerabout 2 hours ago
Windows Malware Uses LLMs for Autonomous Attacks
6 min read
Cisco Talos discovered CLOSEDQUORUM, a Windows malware that queries Google Gemini, DeepSeek, Qwen, and Mistral to autonomously choose post-compromise actions like credential theft and crypto wallet extraction. It is the first publicly documented Windows implant to use LLMs for command-and-control. No in-the-wild deployment has been observed, but the developer is linked to 2025 carding forum posts.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
