AI-powered malware sounds terrifying. The practical response is less dramatic.

A recent WIRED report describes a Windows malware program that can ask several commercial AI models what it should do next, tally their recommendations, and act without waiting for continuing instructions from a human operator. That sounds like the opening scene of a fairly decent science-fiction movie.

The underlying research from Cisco Talos is worth taking seriously. The program, called CLOSEDQUORUM, was designed to target login credentials and cryptocurrency wallets. Its decision system could consult DeepSeek, Qwen, Mistral, and Google Gemini, then choose among a limited set of actions.

What has actually been demonstrated?

This was not an all-knowing machine inventing its own criminal ambitions. Human developers built the malware, selected its capabilities, and gave the AI models a restricted menu of choices. Cisco Talos says the publicly observed version contained placeholder credentials and a dummy webhook. The researchers have not confirmed that it was deployed in a real attack.

That qualification matters. So does the precedent. The research demonstrates that part of an attack can be handed to an AI decision loop using models and API access that already exist. It could allow future attackers to operate more campaigns without personally directing every step.

What should a smaller business do about it?

Probably nothing exotic. Do not buy an expensive “AI security solution” because a frightening headline made the rounds. Start by asking whether the ordinary protections are actually in place: current software, multifactor authentication, unique passwords stored in a password manager, reliable backups, controlled vendor access, and a clear process for suspicious email or account activity.

AI may help attacks move faster or run with less supervision. It does not magically make stolen passwords safe, restore an untested backup, or remove unnecessary access from an old employee or outside vendor. Those remain business decisions, and they are often where the useful work begins.