Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
Summary: Anthropic reported that cybercriminals and state-sponsored hackers used its Claude models for attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026, grouping them as Generative Threat Groups. The 154-page report describes use ranging from conversational help building malware and phishing kits to autonomous multi-agent frameworks that ran reconnaissance, exploitation, and data theft against multiple victims in parallel for hours or days, including a Russian state-sponsored actor, GTG-20006, with overlaps to Midnight Blizzard.
Key Takeaway: Anthropic's own framing is that AI has collapsed the labor and tooling gap separating well-resourced state operations from individual operators - and its report documents autonomous multi-agent operations running against multiple victims in parallel for hours or days with minimal human input.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026