MalwarePublished 22 Sep 2026

New ClosedQuorum Windows malware uses AI for attack decisions

Source Bleeping Computer

Description

ClosedQuorum is a newly identified Windows malware that leverages multiple AI models, including Google Gemini, DeepSeek, Qwen, and Mistral, to autonomously decide its actions during the post-compromise phase of an attack. This AI-driven approach allows the malware to adapt its behavior dynamically based on the environment and objectives. No specific affected software versions or exploitation details have been provided. There is no known exploit in the wild at this time, and no patch or remediation guidance is available.

Impact

The malware's AI-driven decision-making capability potentially increases the effectiveness and adaptability of post-compromise activities, which could complicate detection and response efforts. However, without evidence of active exploitation or specific attack vectors, the immediate impact remains theoretical. The lack of known affected versions or patches means organizations should remain vigilant but no direct remediation steps are currently specified.

Defensive guidance

No official patches or remediation guidance are currently available. Security teams should monitor for updates from vendors and threat intelligence sources regarding ClosedQuorum. Standard endpoint protection and behavioral detection mechanisms may help identify anomalous activity consistent with AI-driven malware, but no specific mitigations are documented at this time.

Summary

ClosedQuorum is a Windows malware family that incorporates advanced AI models such as Google Gemini, DeepSeek, Qwen, and Mistral to autonomously determine attack decisions after compromising a system. The use of multiple AI engines suggests a sophisticated capability to adapt and optimize malicious actions without direct human control. The malware targets Windows environments but no specific versions or affected software components have been identified. There is no current evidence of active exploitation in the wild, and technical details about its operation remain limited.

References

bleepingcomputer.com/news/security/new-closedquorum-windows-malware-uses-ai-for-attack-decisions/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 22 Sep 2026, 18:17 UTC

References

Community reviews

Related threats