[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_f-1IPvWu9oVNm9FWkc9Yclci0-t1rvjfFzNt74nxuE":3},{"article":4,"iocs":53,"watch_terms":57,"solutions":58,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"28e888ee-4b5e-49fd-9b8c-d14a6c2953a9","New ClosedQuorum Windows malware uses AI for attack decisions","new-closedquorum-windows-malware-uses-ai-for-attack-decisions-724fc7","A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack. [...]","A new Go-based Windows malware named ClosedQuorum is leveraging multiple AI models, including Google Gemini, DeepSeek, Qwen, and Mistral AI, to autonomously make post-compromise attack decisions without human intervention. The malware uses a voting system among the AI models to determine actions such as credential dumping, data exfiltration via Discord webhooks, and persistence. While not confirmed in the wild, its architecture represents a significant shift towards automated attack chains.","New Windows malware ClosedQuorum uses AI models for autonomous attack decisions.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fnew-closedquorum-windows-malware-uses-ai-for-attack-decisions\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2025\u002F10\u002F21\u002FRobot.jpg","2026-09-22T18:04:39+00:00","2026-09-22T20:00:26.702099+00:00",9,[17,20,22,24,26,28],{"name":18,"type":19},"Gemini","product",{"name":21,"type":19},"DeepSeek",{"name":23,"type":19},"Qwen",{"name":25,"type":19},"Mistral",{"name":27,"type":19},"Chrome",{"name":29,"type":19},"Edge","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":30,"icon":32,"name":33,"slug":34},null,"Threat Intelligence","threat-intelligence",[36,41,46,51],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":42},{"id":43,"icon":32,"name":44,"slug":45},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":47},{"id":48,"icon":32,"name":49,"slug":50},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":52},{"id":30,"icon":32,"name":33,"slug":34},[54],{"type":50,"value":55,"context":56},"ClosedQuorum","Name of the new Windows malware utilizing AI for attack decisions.",[18,21,23],{"controls":59,"vendors":137},[60,86,112],{"slug":61,"name":62,"problem":63,"products":64},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","app-control-for-business","App Control for Business","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fapplication-security\u002Fapplication-control\u002Fapp-control-for-business\u002F","Application control built into Windows, formerly Windows Defender Application Control, with AppLocker as the older option. Policies can be managed through Intune.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","allowlisting","Allowlisting","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fallowlisting","Blocks any software that has not been approved, including ransomware and unapproved remote-access tools. A learning period builds the approved list first.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":82,"product_name":83,"url":84,"description":85},"ringfencing","Ringfencing","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fringfencing","Limits what approved applications may do, such as which files, network locations and other programs they can reach, so a compromised application cannot be turned against you.",{"slug":87,"name":88,"problem":89,"products":90},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[91,96,104],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":92,"product_name":93,"url":94,"description":95},"defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"slug":45,"name":113,"problem":114,"products":115},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":133,"product_name":134,"url":135,"description":136},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",[138],{"slug":139,"name":140,"logo_path":141,"roles":142},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png",[143],"reported_by",{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":160},"ai-powered-malware-autonomously-executes-post-compromise-attack-chains","AI-Powered Malware Autonomously Executes Post-Compromise Attack Chains","ClosedQuorum represents a dangerous evolution in malware design, using a consensus voting system across multiple AI models to autonomously decide on credential dumping, data exfiltration, and persistence — all without requiring a human attacker to issue commands. This architecture dramatically compresses the attacker's decision loop, meaning defenders have far less time to detect and respond before significant damage is done. The use of legitimate AI APIs and platforms like Discord as exfiltration channels allows the malware to blend into normal network traffic, making detection significantly harder. This matters because traditional signature-based defenses and human-speed incident response processes will increasingly struggle against fully automated, adaptive attack chains.",[149,150,151,152,153,154,155,156,157,158,159],"CIS Control 4 – Controlled Use of Administrative Privileges","CIS Control 9 – Limitation and Control of Network Ports, Protocols, and Services","CIS Control 13 – Data Protection","CIS Control 17 – Incident Response Management","NIST SP 800-61 – Computer Security Incident Handling Guide","NIST AC-6 – Least Privilege","NIST SI-3 – Malicious Code Protection","NIST SI-4 – Information System Monitoring","MITRE ATT&CK T1003 – OS Credential Dumping","MITRE ATT&CK T1567 – Exfiltration Over Web Service","MITRE ATT&CK T1547 – Boot or Logon Autostart Execution (Persistence)",{}]