New ClosedQuorum Windows malware uses AI for attack decisions

ClosedQuorum represents a dangerous evolution in malware design, using a consensus voting system across multiple AI models to autonomously decide on credential dumping, data exfiltration, and persistence — all without requiring a human attacker to issue commands. This architecture dramatically compresses the attacker's decision loop, meaning defenders have far less time to detect and respond before significant damage is done. The use of legitimate AI APIs and platforms like Discord as exfiltration channels allows the malware to blend into normal network traffic, making detection significantly harder. This matters because traditional signature-based defenses and human-speed incident response processes will increasingly struggle against fully automated, adaptive attack chains.