MediumNewsLLM-specific
AI malware just removed the human from the attack loop
- Published
- Record updated
Summary
Cisco Talos researchers describe CLOSEDQUORUM, a malware binary they call the first "LLM-as-C2" architecture, which uses a panel of large language model judges to automate command-and-control and steal credentials. It targets LSASS credential dumping and browser saved passwords in Chrome, Edge and Firefox, plus crypto wallets such as MetaMask, Ethereum and Exodus. Cisco Talos states there is not yet any confirmation of its deployment in the wild.
Topics
Related items
- InfoJim Cramer has three lingering questions about Anthropic ahead of its historic IPOSame vendor · CNBC Technology
- Infollm-gemini 0.37Same vendor · Simon Willison's Weblog
- InfoGoogle’s new Gemini model is better at understanding complicated questionsSame vendor · The Verge (AI)
- InfoNo, AI agents did not discover a previously unknown Maya siteSame vendor · The Verge (AI)
- LowAI chatbots are recommending fake retail websites, study findsSame vendor · The Verge (AI)