Threats tagged 'llm orchestration'

CyberStrikeAI is an open-source AI-driven attack framework used in real-world campaigns targeting educational institutions in Africa and Latin America. It combines large language model (LLM) orchestration with a traditional command-and-control (C2) server, where an AI model generates commands executed by implants on compromised hosts. Initial access was gained via compromised SQL Server infrastructure. The framework automates post-exploitation activities such as reconnaissance, privilege escalation, credential dumping, lateral movement, and data exfiltration using standard techniques like Kerberoasting, AS-REP Roasting, LSASS dumps, DCSync, and Golden Ticket attacks. The AI orchestration reduces the skill barrier for attackers by automating tasks that normally require manual intervention. Despite the AI component, the malicious actions on victim systems use well-known techniques detectable by conventional security controls.

CLOSEDQUORUM is a Windows malware binary representing the first documented implant utilizing autonomous AI-driven command and control. Discovered through Cisco Talos' CAIRN project, it delegates tactical decisions to a panel of commercial large language models including DeepSeek, Qwen, Mistral, and Google Gemini. The system operates through plurality voting among AI models to select actions for credential harvesting and crypto wallet theft, eliminating the need for continuous human operator involvement. The 16.4MB Go-compiled executable employs structured JSON schema to constrain LLM responses to executable attack choices. While containing placeholder credentials in public distribution, development builds demonstrate compile-time injection of operator-specific API keys and Discord webhooks. This architecture represents a significant shift toward effort displacement in cyber operations, where entire attack phases execute autonomously without human bottlenecks, though introducing new dependencies on commerci...