Cisco Talos Finds First LLM-as-C2 Malware
Cisco Talos researchers identified CLOSEDQUORUM, malware using an LLM-as-C2 architecture in which a panel of large language models acts as judges to autonomously map and execute a credential-stealing attack chain without human involvement. It targets Microsoft's LSASS process, but deployment in the wild is not yet confirmed.