This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

Cisco Talos discovered CLOSEDQUORUM, a Windows malware prototype that uses votes from up to four AI models to decide its next action, such as stealing credentials or passwords. The malware sends system info to AI services DeepSeek, Qwen, Mistral, and Google Gemini, which vote on actions; results are posted to a Discord channel for the attacker. The public version is non-functional due to placeholder API keys and webhook URLs, and Talos has not observed a full attack cycle.