Cisco Talos documents CLOSEDQUORUM, a Windows implant that lets four LLMs vote on its next attack step

Cisco Talos (corroborated by The Register and BleepingComputer)·high signalXBlueskyLinkedInCopy link

Cisco Talos disclosed CLOSEDQUORUM, which it calls the first reported fully autonomous AI command-and-control implant. The implant sends host data to up to four commercial model providers (DeepSeek, Qwen, Mistral and Gemini) and runs whichever action wins the vote. It needs no human operator or dedicated C2 server, and its goal is harvesting credentials and crypto wallets. Talos has not confirmed any in-the-wild deployment, but the design makes commercial model APIs themselves the C2 channel, so defenders should watch for outbound calls to LLM providers from endpoints that have no reason to make them.