Malware analysis tooling

Talos details a credential stealer that asks four commercial model APIs what to do next

Cisco Talos has published CLOSEDQUORUM, a Windows credential stealer with no command-and-control server. It hands the state of the infected host to Gemini, DeepSeek, Qwen and Mistral, then acts on the majority verdict.