AI malware just removed the human from the attack loop
Summary
Researchers at Cisco Talos discovered CLOSEDQUORUM, a malware that uses a panel of large language models (LLMs, AI systems trained on large amounts of text data) to fully automate cyberattacks without human involvement. The malware targets credential theft by stealing passwords from Windows systems, web browsers, and cryptocurrency wallets, and uses multiple AI models that vote on attack decisions, removing the need for human attackers to actively control the attack. While this represents a significant advancement in automated attacks, Cisco Talos confirmed that CLOSEDQUORUM has not yet been deployed in real-world attacks.
Classification
Affected Vendors
Related Issues
Original source: https://www.csoonline.com/article/4225264/ai-malware-just-removed-the-human-from-the-attack-loop.html
First tracked: September 23, 2026 at 02:00 AM
Classified by LLM (prompt v3) · confidence: 85%