The Closed Quorum: Inside the first reported autonomous AI C2 implant
Cisco Talos reports CLOSEDQUORUM, a malware binary discovered through its CAIRN project, that exhibits autonomous command and control. The implant can execute expanding portions of an attack chain without an operator’s involvement.
Autonomous command and control could let attackers conduct more of an operation without direct intervention, changing how defenders detect and respond to malware. The report signals a need to account for automated behavior in incident monitoring.
