{
  "id": 9224538,
  "title": "Cisco Talos finds malware that puts its next move to a four-model vote",
  "url": "https://urgent.news/2026/09/22/cisco-talos-finds-malware-that-puts-its-next-move-to-a-four-model-vote",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-22T23:44:32.000Z",
  "source": {
    "name": "SiliconANGLE",
    "slug": "siliconangle",
    "url": "https://siliconangle.com/2026/09/22/cisco-talos-finds-malware-that-puts-its-next-move-to-a-four-model-vote/"
  },
  "original_language": "en",
  "account": "Cisco Systems Inc.’s Talos Threat Intelligence group has unveiled an open-source toolkit for detecting a new kind of malware dubbed CLOSEDQUORUM. This Windows credential stealer defies traditional command-and-control operations, instead directing its actions through a multi-model voting system involving Google Gemini, DeepSeek, Qwen, and Mistral—a departure from any previously documented Windows malware that relies on a single decision-making model.\n\nThe malware, a 16.4 MB Go binary, solicits advice from these four commercial large language models sequentially every five to 15 minutes. Each model is given a system prompt instructing it to play the role of an \"advanced malware strategist\" and provide only executable decisions. The model that secures the majority of votes – Mistral holds the tie-break – dictates the malware’s course of action, which could involve credential theft, code injection, persistence establishment, or lateral movement. All these actions culminate in encrypted data exfiltration via Discord webhooks, bolstered by stealth tactics such as suppressing Windows event tracing.\n\nThe toolkit, known as the Cognitive Artifact Intelligence Research Network (CAIRN), is available on GitHub. It employs metadata analysis, searching for signs of AI integration like calls to model providers, Python framework imports, local model runtimes, and linguistic text designed to mislead automated analysts. The CAIRN filters categorize findings into three tiers, from the generic presence of AI components to the specific identification of malware families, utilizing an embedding model that groups samples sharing no common strings at all.\n\nThis new breed of malware reflects a significant evolution in attack tactics. While initially an optional feature, language models have since become central to the malware’s operation, evolving from simple payloads to a fully autonomous decision-making component. This shift underscores a trend of delegating more complex tasks to artificial intelligence, a development that poses a formidable challenge for defenders. With models continuously responding to task requests indefinitely, the human element in the attack chain is diminished, allowing the malware to operate autonomously beyond human attention spans, working hours, and cognitive capacities.",
  "summary": "Cisco Systems Inc.’s Talos Threat Intelligence group today released an open-source toolkit for hunting malware that has artificial intelligence built into it. The first sample it has detailed is a Windows credential stealer that takes its orders from no command-and-control server. Talos calls it CLOSEDQUORUM, and its tactical decisions go to a vote among four […] The post Cisco Talos finds…",
  "key_points": [
    "CLOSEDQUORUM malware uses Google Gemini, DeepSeek, Qwen, and Mistral for decision-making.",
    "Each model votes sequentially every 5-15 minutes, with Mistral as tie-breaker.",
    "CAIRN toolkit detects AI integration in malware, categorizes findings."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}