Forest Global Training Partners

Cyber Risks · Cisco Talos

The Closed Quorum: Inside the first reported autonomous AI C2 implant

Summary: Cisco Talos documented CLOSEDQUORUM, a 16.4MB 64-bit Go-compiled Windows implant that delegates tactical command and control to a quorum of up to four commercial LLMs - DeepSeek, Qwen, Mistral, and Google Gemini - which vote by plurality on each next action, with DeepSeek holding the deciding vote in any tie. The public distribution build is inert, carrying placeholder API keys and a dummy webhook, but development builds show build-time injection of provider credentials and a per-operator customized executable, with stolen material sent AES-256-GCM encrypted to the operator's Discord webhook.

What you should know: The implant replaces attributable, blockable C2 infrastructure with API calls to providers used by thousands of legitimate applications daily, so domain blocking alone will not separate it from normal traffic - the signal is a host contacting several of those providers while also touching LSASS, injecting into suspended processes, or creating WMI persistence. Talos assesses this as a credentials-as-a-service model whose differentiator is the autonomous orchestration layer, meaning an operator need not be online for a campaign to run.

Read the original at Cisco Talos ↗

Topics
Malware
Related