Threat
The Closed Quorum: Inside the first reported autonomous AI C2 implant
First reported · Discovered talosintelligence.com
Page published
Earliest dated coverage: 26 Sep 2026 · First observed: 22 Oct 2026 · Latest dated coverage: 26 Sep 2026
Coverage timeline
Single-source analysis — one report is available.
Why it matters
CLOSEDQUORUM illustrates how malware can delegate tactical decisions to legitimate model APIs, making suspicious LLM-service traffic relevant to defenders monitoring autonomous malware and command-and-control activity.
Cisco Talos identified CLOSEDQUORUM, a Windows implant designed to let up to four commercial LLMs vote on its next action rather than receive instructions from attacker-operated command-and-control infrastructure. Its action set includes credential theft, process injection, persistence, and a nonfunctional lateral-movement handler. The circulating sample contains placeholder API keys and cannot operate as distributed, and Talos reported no confirmed in-the-wild deployment.