Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
35 IOCs
CLOSEDQUORUM: Malware Puts AI in the C2 Loop
Threat Actors
Malware Families
Excerpt
CLOSEDQUORUM: Malware Puts AI in the C2 Loop Blog Home Company Marketplace The PolySwarm Blog Analyze suspicious files and URLs, at scale, millions of times per day. Get real-time threat intel from a crowdsourced network of security experts and antivirus companies competing to protect you. CLOSEDQUORUM: Malware Puts AI in the C2 Loop Sep 28, 2026, 1:25:38 PM / by The Hivemind Tweet Executive Summary Cisco Talos has identified CLOSEDQUORUM, a Windows malware implant that…
Read the original report →Diamond Model
Adversary(34)
Infrastructure
Capability(41)
Victim
Indicators of Compromise
Open the mindmap →35 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2023-1389 | High | Score 82/100 | First seen |
| CVE | CVE-2025-49704 | High | Score 82/100 | First seen |
| CVE | CVE-2022-30190 | High | Score 79/100 | First seen |
| CVE | CVE-2025-0994 | High | Score 82/100 | First seen |
| CVE | CVE-2022-47986 | High | Score 82/100 | First seen |
| SHA256 | 250d4fa37488af9b025333fa17705573d721467b203765bc360890b4f5a90cd7 | High | Score 85/100 | First seen |
| CVE | CVE-2025-55182 | High | Score 82/100 | First seen |
| CVE | CVE-2021-3493 | High | Score 82/100 | First seen |
| SHA256 | 5191cf625dfc209a347f137b50aea199e82040fd5ee9086fb3e2de73c133f3cb | High | Score 85/100 | First seen |
| SHA256 | c13cea04f598e2b0c248d603a6e31bd13aabb64d8149c1b6a77b64e0b983a86f | High | Score 85/100 | First seen |
| CVE | CVE-2023-34362 | High | Score 79/100 | First seen |
| CVE | CVE-2025-3248 | High | Score 79/100 | First seen |
| SHA256 | c4dc171f2513fcaf9d5ecc815a94aee4063b213ab380f80bd3ac422dee5205a7 | High | Score 85/100 | First seen |
| CVE | CVE-2025-53770 | High | Score 79/100 | First seen |
| CVE | CVE-2022-31199 | High | Score 82/100 | First seen |
| CVE | CVE-2021-21974 | High | Score 82/100 | First seen |
| CVE | CVE-2022-21894 | High | Score 82/100 | First seen |
| CVE | CVE-2025-49706 | High | Score 82/100 | First seen |
| CVE | CVE-2023-46604 | High | Score 84/100 | First seen |
| CVE | CVE-2021-4034 | High | Score 79/100 | First seen |
| CVE | CVE-2022-26134 | High | Score 82/100 | First seen |
| CVE | CVE-2023-2868 | High | Score 79/100 | First seen |
| CVE | CVE-2024-3400 | High | Score 79/100 | First seen |
| CVE | CVE-2023-22518 | High | Score 82/100 | First seen |
| CVE | CVE-2024-21412 | High | Score 82/100 | First seen |
| CVE | CVE-2021-33044 | High | Score 79/100 | First seen |
| SHA256 | eddbd0ecf7195d38fefae5b9d393abfa79e6f3f94bde19308ecef130a05a42e5 | High | Score 85/100 | First seen |
| CVE | CVE-2026-21509 | High | Score 79/100 | First seen |
| CVE | CVE-2017-7921 | High | Score 79/100 | First seen |
| SHA256 | f5f1f8c3e7b883793800ab6ccf21b3e60bd0730f300b4595fe74a33adc17a63c | High | Score 85/100 | First seen |
| CVE | CVE-2024-7344 | High | Score 82/100 | First seen |
| CVE | CVE-2023-36025 | High | Score 82/100 | First seen |
| CVE | CVE-2025-53771 | High | Score 82/100 | First seen |
| CVE | CVE-2024-40766 | High | Score 80/100 | First seen |
| CVE | CVE-2025-21042 | High | Score 82/100 | First seen |
IOC Relationship Graph
Building graph…