This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup work from start to finish, and the public version of the malware does not work as it is.

• Uncovering a SectopRAT Variant Embedded in Legitimate SoftwareMalware2026-09-25
• Inside Phexia: A macOS malware delivered through ClickFixMalware2026-11-05
• RARLAB WinRAR · Gorbag: Orcs at the border harvesting intelligence from UkraineExploitedMalware2026-11-03
• Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealerMalware2026-10-31
• September 2026 Threat Trend Report on APT Attacks (South Korea)Malware2026-10-30