Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions

A new Windows malware called CLOSEDQUORUM can query up to four LLM providers - Google Gemini, DeepSeek, Qwen, and Mistral - to autonomously select from predefined post-compromise actions, including stealing users’ credentials and cryptocurrency wallets.

Read the full article at The Register →