AnalysisCybersecuritySeptember 22, 2026

CLOSEDQUORUM malware lets four AI models vote on its next move

Read original source →wired.com

Cisco Talos found a Windows malware that polls DeepSeek, Qwen, Mistral and Google Gemini for commands instead of a C2 server, tallying votes across four actions: steal, inject, persist, move. Talos never saw it work end-to-end and the public build is non-functional; code analysis dates to June 17, 2026.

2 sources

More stories today

Open the live feed