Cisco's CAIRN Tracks Malware That Uses Artificial Intelligence

Cisco has released CAIRN, an open-source research toolkit to help defenders identify and track malware that incorporates artificial intelligence into its operations. The tool focuses on tracing AI-linked malware by detecting metadata left behind when developers integrate large language models and AI services into malicious tools.

CAIRN searches for 'cognitive artifacts,' or traces created when developers integrate AI components into malicious tools. These artifacts can include embedded prompt templates, AI provider endpoints, API key prefixes, and more.

The tool uses a metadata-first approach, allowing analysts to investigate potentially relevant samples without initially relying on binary execution or local detonation. CAIRN stores candidate information in a SQLite corpus and automatically applies YARA rules during import, helping to distinguish basic AI-related indicators from stronger signs that AI is being used operationally.

Cisco Talos introduced CAIRN alongside its analysis of CLOSEDQUORUM, a Windows implant that delegates tactical command-and-control decisions to a panel of commercial large language models. The malware can query various AI providers and select actions such as credential theft, persistence, and code injection without continuous human operator instructions.