September 23, 2026
After a Windows Breach, CLOSEDQUORUM Takes Instructions From AI: It Queries 4 Models
On September 22, Talos described CLOSEDQUORUM: after compromising Windows, the program polls 4 AI models.
Previously, malware executed a predefined set of commands. The 16.4 MB CLOSEDQUORUM is written in Go for 64-bit Windows and requests next steps from DeepSeek, Qwen, Mistral and Gemini. It selects an action by majority vote; in a tie, it ranks DeepSeek above Qwen, Mistral and Gemini.
Indicators and detection. Talos recommends looking for a Windows process that contacts multiple AI APIs and Discord, accesses LSASS, injects into processes, or establishes persistence through WMI. The loop runs every 5–15 minutes. Talos's YARA rule includes `api.deepseek.com`, `openrouter.ai`, `api.mistral.ai`, `cdn.discordapp.com`, and the CLOSEDQUORUM system-prompt string.
Talos tool. The open-source CAIRN detects AI-enabled malware. Installation requires Python 3.11+, `git clone`, virtualenv, `pip install -e ".[dev]"`, and `VT_API_KEY` in `.env`. Content search requires a VirusTotal Intelligence subscription, while `PROMPTINTEL_API_KEY` is optional. `cairn validate-rules` should return `26 rules, valid: true`, `cairn pull --filter python-ai-scripts --limit 25` downloads 25 samples, and `cairn refresh --sha256 <sha256> --behaviours` parses the behavior of the selected SHA-256.
Talos did not confirm CLOSEDQUORUM's use on real systems: the public binary contains `dummy_api_key` and `dummy_webhook_url`, so researchers could not observe a full execution.
Source
