Cisco Talos documented CLOSEDQUORUM, a Windows implant that polls up to four AI models to select actions targeting credentials, browser passwords and crypto wallets without ongoing human tasking. The creator is unknown; no victims or active campaign have been confirmed.
It queries DeepSeek, Qwen, Mistral and Google Gemini. The models choose only among actions built into the malware; CLOSEDQUORUM executes the plurality winner, breaking ties in that same provider order. If one service is unavailable, it can query the others. Talos said this is, to its knowledge, the first publicly documented Windows implant to use AI for tactical command and control.
Talos also released CAIRN, an open-source toolkit that scans malware samples for traces of AI integration, such as model-provider endpoints and prompt structures. During development and testing, it found roughly 20 additional AI-integrated samples—more than the approximately nine families previously documented publicly. Researcher Ryan Fetterman described the field as largely experimental but more diverse than earlier reporting suggested.
