A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight
New tool uncovers CLOSEDQUORUM, malware using a hive-mind of four LLMs for autonomous command-and-control decisions.
Cisco Talos researchers have used their CAIRN framework to identify CLOSEDQUORUM, a Windows malware tool that uses multiple LLMs as a hive-mind command-and-control system. The malware polls DeepSeek, Qwen, Mistral, and Google Gemini to reach a consensus on its next actions, operating autonomously without human intervention. This discovery highlights the evolution of AI integration from productivity enhancement to full operationalization in offensive cyber operations.
- Researchers found CLOSEDQUORUM, malware that uses four LLMs as a hive-mind C2 infrastructure.
- The tool polls DeepSeek, Qwen, Mistral, and Gemini for consensus on next steps without human input.
- CAIRN framework was developed to track AI-integrated malware through metadata fingerprints.
- The research highlights the shift from AI as a productivity tool to an operational component in attacks.
- Malware
- CLOSEDQUORUMCAIRNLAMEHUG
- Organizations
- Cisco Talos
From the original article
3 min read at wired.com
Cisco Talos researchers created a new framework for identifying malware and hacking tools that rely on AI chatbots—and quickly discovered something unusual.
By Lily Hay Newman · wired.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.