Malware Leverages AI Models to Decide Next Move

A Windows implant dubbed CLOSEDQUORUM outsources its decision-making to commercial AI services including DeepSeek and Google Gemini, sending a snapshot of its host environment to multiple models and executing whichever action receives the most votes. The malware's use of a multi-model voting scheme lets it adapt its attacks in real time.

Meet CLOSEDQUORUM, a sneaky Windows implant that outsources its decisions to commercial AI services like DeepSeek and Google Gemini, allowing it to adapt and evolve its attacks in real-time. This clever malware sends a snapshot of its host environment to multiple AI models, then executes the action that gets the most votes.