ACVEAgent configuration vulnerability registry

Advisories › ACVE-2026-0440

ACVE-2026-0440

ClosedQuorum Windows malware using Gemini, DeepSeek, Qwen and Mistral, after compromise, let a panel of models choose credential theft, injection or persistence actions without a human operator.

Exposure

Harness
ClosedQuorum Windows malware implant — confirmed, www.bleepingcomputer.com
Model
Gemini, DeepSeek, Qwen and Mistral; versions not stated — confirmed, www.bleepingcomputer.com
Goal
Any post-compromise action selected by the malware (goal not stated by the source) — unconfirmed
Tools and settings
The malware's model-voting panel and predefined post-compromise action modules — confirmed, www.bleepingcomputer.com
Approval
The attack chain proceeds without commands from a human operator after compromise — confirmed, www.bleepingcomputer.com
Input controlled by
package-publisher
What the agent does
The malware's model panel selects and runs post-compromise theft, injection or persistence actions.
Harm
credential-theft
Reach
Credentials, browser data and cryptocurrency wallets on the infected Windows host — confirmed, www.bleepingcomputer.com (cloud credentials, a wallet, a browser session)

Reproducibility: partial (model availability not checked (no registry reference); trigger not published)

Severity
HIGH
Status
Unverified
Kind
Artifact
Source date
2026-09-22
Modified
2026-09-25
Aliases
No CVE assigned — A malware artifact is not assigned a CVE in the public report.
Affected
  • AgentHarness: closedquorum — all versions
Harness/product
closedquorum
Classes
credential-theft; command-injection; CWE-506
Taxonomy
ATLAS: AML.T0117; ATLAS: AML.T0016.002; ATLAS: AML.T0055
Licence
CC-BY-4.0 advisories; MIT code

Claims

Confirmed means the statement matches the cited primary source. Nothing on this page has been reproduced.

Claims on this page have not been checked against primary sources.

In the wild

demonstrated · research

Artifact

Payload
other · companion-script
Platform status
github · unknown (checked 2026-09-24)
C2
—
Target
Windows host

File hashes

  • None recorded.

Description

What

BleepingComputer reported that the Go-based ClosedQuorum implant uses several AI models and a voting system to choose post-compromise actions. Cisco Talos identified predefined decisions including credential and cryptocurrency-wallet theft, code injection and persistence; the analyzed sample did not have a working lateral-movement handler.

Detection

Recorded from BleepingComputer's report of Cisco Talos research. Not recreated in a lab.

Fix

Treat ClosedQuorum samples as malware, isolate affected Windows hosts and rotate credentials exposed on them.

Fix

Remove ClosedQuorum malware from affected Windows hosts and rotate exposed credentials.

  • Remove artifact:closedquorum. The report describes it as a Windows malware implant. Owner: operator

References

REPORT

Report a problemJSON