Cisco Talos flags CLOSEDQUORUM: malware that asks commercial AIs what to steal next

By Jason Sibley

What happened

Cisco Talos has published analysis of CLOSEDQUORUM, which it describes as the first publicly documented Windows implant to use commercial large language models for autonomous command and control. After it is on a machine, the malware queries a panel of models (DeepSeek, Qwen, Mistral and Google Gemini), has them vote on the next action, then can dump credentials, inject code or set persistence without a human operator issuing live commands.

Talos stresses it has not confirmed in-the-wild deployment; the public distribution build shipped with dummy API keys. Stolen material is designed to leave via a Discord webhook. Full technical write-up: Cisco Talos.

What it means for a small business

Risk. You do not need to understand every ATT&CK technique. The point for a small firm is simpler: malware that “phones home” to everyday AI APIs is harder to spot than one talking only to a shady domain. If staff PCs can reach random AI endpoints and Discord webhooks, that is a detection gap.

Cost. No new product to buy solely because of this report. The cheap wins are still endpoint protection that is actually on, least-privilege admin rights, and a habit of questioning unexpected Discord or browser-password prompts.

Time. One afternoon of hygiene beats a week recovering from a credential theft — especially if browser-saved passwords or crypto-wallet extensions are on work machines.

Customer impact. If client passwords or payment details live in browsers on office PCs, this class of tool is aimed squarely at that stash.

What you can do this week

1. Confirm antivirus / EDR is on for every Windows work PC, and that it is updating.
2. Strip admin rights from day-to-day accounts; use a separate admin login only when installing software.
3. Move passwords out of the browser into a password manager, and turn on multi-factor authentication on email and banking.
4. Ask your IT person (or MSP) to watch for odd outbound calls to multiple AI provider APIs from non-browser processes, plus Discord webhook traffic from unknown apps.
5. Remind the team: unknown .exe files, “Windows Update” prompts from odd places, and sudden Discord installs are stop-and-check moments.

How we can help

If you want a short, practical session on AI-era hygiene for a small UK team, paired with a clearer website and sales setup so tools stay under control, our SMB AI sessions and AI sales & marketing desk are open for that conversation.