ClosedQuorum is a new Windows malware implant that delegates its post compromise decisions to a “panel” of commercial AI models (Google Gemini, DeepSeek, Qwen, and Mistral) instead of a traditional attacker run command and control (C2) server. The Go based malware sends basic host details (name, OS version, admin status) and a fixed menu of actions to the models: steal, inject, persist, or move (the public build has no code for move). Each model must respond in a strict format where the malware tallies the votes and executes the winning action. “Steal” simultaneously dumps LSASS credentials, grabs saved browser passwords (Chrome, Edge, Firefox), and extracts data from MetaMask, Exodus, and Ethereum wallets. “Inject” generates shellcode and uses Early Bird APC injection or process hollowing. “Persist” creates Registry Run entries, scheduled tasks, and WMI event subscriptions disguised as Windows Update. Decisions and their rationales, along with stolen data, are sent to operators via a Discord webhook, enabling a largely automated attack chain once delivery occurs. The analyzed sample uses placeholder API keys and a dummy webhook While researchers have not seen full in the wild use, ClosedQuorum is viewed as the first publicly documented Windows malware to hand tactical C2 choices to AI models, likely seen as an early sign of attack chain automation that defenders should monitor via behavioral signals (AI service traffic plus LSASS access, injection, WMI persistence, Discord webhooks) rather than simple domain blocking. SHA-256 hash IOCs as well as Registry, File, and WMI artifact signals are included in the articles linked below.