{
  "id": 9254258,
  "title": "CLOSEDQUORUM: An Autonomous Windows Implant Using Multiple LLMs for Attack Decisions",
  "url": "https://urgent.news/2026/09/23/closedquorum-an-autonomous-windows-implant-using-multiple-llms-for",
  "topic": "ai",
  "section": "AI",
  "published": "2026-09-23T03:04:55.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/anoymask/closedquorum-an-autonomous-windows-implant-using-multiple-llms-for-attack-decisions-g9e"
  },
  "original_language": "en",
  "account": "Cisco Talos has reported a new autonomous Windows implant called CLOSEDQUORUM. This implant is designed to send structured requests containing host information to multiple large language models (LLMs) and then execute an attack action selected by plurality voting. The implant is written in Go and targets Windows endpoints.\n\nThe implant collects host details such as the hostname, OS, CPU count, presence of administrator privileges, and target processes. It then sends this information and up to four selectable attack actions to up to four LLMs, including DeepSeek, Qwen, Mistral, and Gemini. The implant receives JSON responses from these LLMs and determines the action with the highest vote count for execution.\n\nThe attack actions include credential dumping from LSASS memory, collection of browser credentials and cryptocurrency wallet files, process injection via Early Bird APC or Process Hollowing, and persistence via Registry Run keys, scheduled tasks, or WMI event subscriptions. The implant encrypts collected data with AES-256-GCM, Base64-encodes it, splits it into 1,900-byte segments, and sends the segments to a Discord Webhook at one-second intervals.\n\nThe implant is deployed separately by the attacker with an API key and Discord Webhook. The public version contains dummy credentials and was not observed to execute in real-world scenarios. Success conditions include the attacker executing the implant on the endpoint with valid LLM API keys and a Discord Webhook. Failure conditions include unknown executable files being blocked with application control and communication to unnecessary AI APIs and Discord Webhooks being restricted.",
  "summary": "+09:00 Original Source : Cisco Talos Severity: high Severity Rationale: Talos statically analyzed a Windows implant that sends host information to up to four commercial LLMs and automatically executes the…",
  "key_points": [
    "CLOSEDQUORUM implant sends host info to multiple LLMs for attack decisions",
    "Collects hostname, OS, CPU count, admin privileges, target processes",
    "Executes credential dumping, browser credential collection, process injection"
  ],
  "editors_take": "This development indicates that attackers are now leveraging AI models to autonomously decide on attack actions, potentially increasing the sophistication and adaptability of their tactics.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}