This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

CLOSEDQUORUM represents a significant evolution in malware design, replacing traditional command-and-control infrastructure with a consensus-based AI decision engine — making it harder to detect through conventional C2 traffic analysis. By delegating attack decisions to AI models, threat actors can reduce their operational footprint and increase adaptability, as the malware can reason about its environment rather than follow static instructions. This matters because traditional defenses — such as blocking known C2 domains or signatures — are less effective against AI-driven, locally autonomous malware. Organizations that rely solely on perimeter and signature-based detection will be especially vulnerable as this technique matures. The theft of credentials, browser passwords, and crypto wallet data means the blast radius of a single infection can be severe and far-reaching.