← registry

Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions

A Windows malware variant named CLOSEDQUORUM integrates large language models to autonomously determine post-compromise actions, representing the first documented case of LLM-assisted command-and-control functionality in a Windows implant.

Categorymisuse
Severitycritical
AI systemagent
Sectorsdefensegovernmenttechnology
Harm typessecurityphysicalfinancial
Lifecycle stageoperation
Actorexternal_attacker
Published2026-09-22 21:33:29

Summary is Secursion's own; full text lives at the source. Attribution preserved.