Cisco Talos investigated CLOSEDQUORUM — malware with autonomous AI-driven control

Cisco Talos describes CLOSEDQUORUM as a Windows implant that uses up to four large language model services to select and execute its next action. Talos has not confirmed deployment in the wild. The publicly distributed binary contains placeholder keys and a dummy webhook and is non-functional as distributed.