---
title: "[AUTO] ClosedQuorum Outsources Command-and-Control to LLMs"
pubDatetime: 2026-09-23T11:53:00.000Z
description: "A new Windows malware outsources C2 decisions to multiple LLMs for autonomous deployment"
tags: [ai-security, security, ai-agents, cyber, 2026, 2026-q3, 2026-09, AUTO]
---
[ClosedQuorum, discovered by Cisco Talos](https://blog.talosintelligence.com/the-closed-quorum-inside-the-first-reported-autonomous-ai-c2-implant/), delegates C2 decisions to four commercial LLMs (DeepSeek, Qwen, Mistral, Google Gemini), each constrained to return one of four JSON actions: credential theft, code injection, persistence, or lateral movement. The malware votes on results, with DeepSeek breaking ties.

The novelty is delegated autonomy. Most malware using LLMs still needs a human operator in the loop. ClosedQuorum removes that person entirely. More striking: the developers engineered fault tolerance by diversifying across multiple providers, hedging against any single model being blocked or its API changing. That's deployment thinking, not a proof of concept.

Stolen credentials encrypt with rotating AES-256-GCM keys and exfiltrate through Discord webhooks. The prompt uses standard jailbreak framing. Outsourcing tactical decisions to a voting panel of LLMs is the real abstraction.

The real question is scope. Talos found this through analysis, but in-the-wild prevalence remains unclear. If ClosedQuorum is deployed, can defenders disrupt LLM-mediated attacks faster than malware authors can rebuild?

---

*Sources: [CLOSEDQUORUM: Inside the First Reported Autonomous AI C2 Implant](https://blog.talosintelligence.com/the-closed-quorum-inside-the-first-reported-autonomous-ai-c2-implant/)*

*Coverage: [New ClosedQuorum Windows Malware Uses AI for Attack Decisions](https://www.bleepingcomputer.com/news/security/new-closedquorum-windows-malware-uses-ai-for-attack-decisions/)  •  [Introducing CAIRN: Frontier tracking for AI-integrated malware](https://blog.talosintelligence.com/introducing-cairn-frontier-tracking-for-ai-integrated-malware/)*

*Related on this blog: [[AUTO] 116 tech firms warn of imminent AI-powered cyberattacks](/posts/auto-ai-cyberattack-warning)  •  [[AUTO] When AI agents breach safety guardrails with a simple reframe](/posts/auto-autonomous-taiwan-breach)  •  [The Taiwan Attack Had a Bayesian Brain, and Twelve Waves](/posts/dream-dissects-taiwan-multi-agent-attack)*