Researchers uncover malware that uses AI to choose its next move
Cisco Talos documents CLOSEDQUORUM, a Windows implant that lets commercial LLMs vote on its next action.
Cisco Talos released CAIRN, an open-source framework that hunts AI-integrated malware using file metadata such as prompts, provider endpoints, and sandbox-evasion text, without executing samples. Its first highlighted find is CLOSEDQUORUM, a 16.4 MB Go Windows implant that asks DeepSeek, Qwen, Mistral, and Gemini to vote on stealing data, injecting code, or establishing persistence, with the goal of harvesting credentials and crypto wallets. The examined copy contained placeholder API keys and a dummy webhook, so researchers did not observe a complete live operation. Talos linked the broader hunt to LAMEHUG, which CERT-UA reported in July 2025 as an early AI-integrated malware sample.
- CLOSEDQUORUM is a 16.4 MB Go Windows implant without a dedicated C2 server.
- DeepSeek, Qwen, Mistral, and Gemini vote on the implant's next action.
- The fixed menu covers data theft, code injection, and persistence.
- The analyzed sample used placeholder API keys and was not run live.
- CAIRN classifies AI-malware artifacts from metadata without executing samples.
- ATT&CK
- T1555 Credentials from Password StoresT1005 Data from Local SystemT1055 Process InjectionT1071.001 Web Protocols
- Vendors
- Cisco
- Malware
- CLOSEDQUORUMLAMEHUG
- Organizations
- Cisco TalosCERT-UA
From the original article
3 min read at helpnetsecurity.com
To help security practitioners catch malware that leans on AI, researchers from Cisco Talos shared an open-source framework that they hope will be used to classify and analyze the threat. The tool, called CAIRN, works entirely from metadata pulled off files. No downloading the malware, no running it.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.