Cisco Talos finds CLOSEDQUORUM malware where four AI models vote on its next move

Cisco Talos discovered a Windows malware called CLOSEDQUORUM that queries four AI models — DeepSeek, Qwen, Mistral and Gemini — and executes the most-voted action: steal, inject, persist or move. It is a non-functional proof of concept with placeholder API keys; the theft itself (LSASS, browser passwords, crypto wallets) is a textbook infostealer.

• Malware polls DeepSeek, Qwen, Mistral and Gemini every 5–15 minutes
• When "steal" wins it dumps LSASS, Chrome, Edge, Firefox passwords and MetaMask, Exodus, Ethereum wallets
• Talos: it is a non-functional PoC with placeholder API keys and Discord webhook
• Defense: don't block AI domains, watch behavior — injection, LSASS access, WMI persistence