{"version":1,"type":"story","url":"https://digestai.news/story/cisco-talos-documents-windows-malware-that-queries-four-ai-models-for","json":"https://digestai.news/story/cisco-talos-documents-windows-malware-that-queries-four-ai-models-for.json","markdown":"https://digestai.news/story/cisco-talos-documents-windows-malware-that-queries-four-ai-models-for.md","slug":"cisco-talos-documents-windows-malware-that-queries-four-ai-models-for","headline":"Cisco Talos documents Windows malware that queries four AI models for attack decisions","summary":"Cisco Talos researchers have documented a Windows implant called CLOSEDQUORUM that delegates tactical decisions to a panel of up to four commercial AI models — DeepSeek, Qwen, Mistral, and Google Gemini — instead of waiting for human commands. The malware sends host information to these providers and executes whichever post-compromise action wins a plurality vote, with a fixed tie-breaker order. The implant targets Windows credentials, browser-stored passwords, and cryptocurrency wallet data. No confirmed victims or in-the-wild deployments have been identified, and the creator remains unknown. Talos describes this as the first publicly documented Windows implant to use multi-model AI for tactical command and control.\n\nTalos also released an open-source detection toolkit called CAIRN (Cognitive Artifact Intelligence Research Network) that scans malware samples for traces of AI integration such as model-provider endpoints and prompt structures. During development, CAIRN uncovered roughly 20 additional AI-integrated malware samples, exceeding the approximately nine families previously documented. Researcher Ryan Fetterman characterized the field as still largely experimental but more diverse than prior reporting suggested. CLOSEDQUORUM differs from earlier examples like LAMEHUG, which required human tasking via a Qwen model on Hugging Face, by placing AI models directly inside the malware's decision cycle.","keyPoints":["CLOSEDQUORUM queries DeepSeek, Qwen, Mistral, and Google Gemini for tactical decisions via plurality vote","No confirmed victims or active campaigns; creator unknown; first documented Windows implant of this kind","Talos released CAIRN toolkit and found roughly 20 additional AI-integrated malware samples during testing"],"whyItMatters":"Malware that delegates decisions to redundant AI providers could be harder to disrupt than traditional command-and-control infrastructure, requiring security teams to monitor outbound connections to legitimate AI endpoints.","category":{"slug":"policy","name":"Policy & Regulation","url":"https://digestai.news/category/policy"},"entities":{"companies":["Cisco Talos","DeepSeek","Qwen","Mistral","Google"],"models":["Gemini"],"people":["Ryan Fetterman"]},"firstPublishedAt":"2026-09-23T10:30:00Z","updatedAt":"2026-09-23T10:30:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"gadgetreview.com","title":"Four AI Chatbots Are Running a Malware Operation Without Human Commands","url":"https://gadgetreview.com/four-ai-chatbots-are-running-a-malware-operation-without-human-commands","publishedAt":"2026-09-23T10:30:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":{"title":"AI Malware Threats The Closed Quorum Saga","url":"https://digestai.news/thread/cisco-talos-unveils-cairn-tool-that-detects-aidriven-closedquorum-malware","storyCount":2},"cite":{"text":"Digest AI, \"Cisco Talos documents Windows malware that queries four AI models for attack decisions\", 23 September 2026, https://digestai.news/story/cisco-talos-documents-windows-malware-that-queries-four-ai-models-for","publisher":"Digest AI","title":"Cisco Talos documents Windows malware that queries four AI models for attack decisions","datePublished":"2026-09-23T10:30:00Z","url":"https://digestai.news/story/cisco-talos-documents-windows-malware-that-queries-four-ai-models-for"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}