Cisco Talos open-sourced an AI-malware tracker and found one that polls four models
Cisco Talos researchers shared an open-source framework on Monday to classify and analyze AI-integrated malware, WIRED reports. The project is called Cognitive Artifact Intelligence Research Network, or CAIRN. Lead researcher Ryan Fetterman built it to flag AI-integration fingerprints in metadata, tag samples, and group them so trends show up.
Fetterman says that after working with CAIRN for the past few months he has discovered about 20 additional examples of AI-integrated malware beyond the thin public list.
The thin list is why the tool exists. In July 2025, Ukraine’s CERT-UA warned about LAMEHUG, which talked to Qwen2.5-Coder-32B-Instruct through a Hugging Face API for commands.
Fetterman’s later retrospective found maybe nine named AI-malware families, some of them research proofs of concept, fewer than he expected. That gap pushed the CAIRN build.
One sample CAIRN helped surface is CLOSEDQUORUM. It is Windows malware that checks with DeepSeek, Qwen, Mistral, and Google Gemini to develop a consensus on next steps, a quorum so the program can keep moving if one service is down. Wired says the design is totally closed, with no mechanism for human input after it lands.
CLOSEDQUORUM’s command-and-control channel, how malware gets instructions once it is on a machine, is a round of public model APIs. Wired says it is designed to steal login credentials and cryptocurrency, with links noted to cybercriminal forums about credit card fraud going back to 2025.
Researchers could not confirm who developed it or whether it has been used in real-world attacks. Cisco Talos senior director Matt Olney frames AI as moving from a productivity tool to an operationalized attacker backend.
The public catalog of AI malware stayed short because many samples were still demos and proofs. CAIRN is the classifier that makes the fingerprints searchable. CLOSEDQUORUM is what shows up when you run that search: a thief that asks four labs’ models for the next move and never waits for an operator.
That is the attacker-side agent story in one Windows sample. The human drops out. The quorum stays on.