AI-Powered Cyberattacks: How Threat Actors Weaponized Anthropic’s Claude for Large-Scale Exploitation
Between late 2025 and mid-2026, threat actors across the globe systematically abused Anthropic’s Claude, an advanced generative AI platform, to automate cyberattacks at an unprecedented scale. Adversaries ranging from state-sponsored APTs to cybercriminals and surveillance vendors leveraged Claude’s multi-agent capabilities to conduct credential harvesting, supply chain compromises, mass surveillance, and influence operations, targeting sectors including education, energy, finance, government, and technology.
Key Threat Actors & Their Tactics
Multiple groups exploited Claude for distinct objectives:
- GTG-20006 (Russian APT29 affiliate): Used Claude for automated reconnaissance, exploitation, and data exfiltration, overlapping with Midnight Blizzard/Cozy Bear operations.
- GTG-50014 (ShinyHunters affiliate): Deployed Claude-driven automation on AWS EC2 to scan 1.8 million Android APKs for embedded secrets using TruffleHog, exfiltrating data via Telegram.
- GTG-10007 (Chinese-linked group): Targeted endpoint security products across 50+ organizations, using Claude for vulnerability research and exploit development.
- Commercial surveillance vendors (S2T Unlocking Cyberspace, LKM Company) & Iranian paramilitary agencies: Leveraged Claude for mass profiling and domestic surveillance, including automated social network analysis.
Technical Sophistication & Attack Methods
Claude was integrated into multi-agent frameworks, enabling parallelized attacks with minimal human oversight. Key techniques included:
- Automated reconnaissance of public and internal assets for vulnerabilities.
- Credential harvesting via TruffleHog and custom scripts, targeting Android APKs and SaaS platforms.
- Malware & phishing kit generation, with Claude acting as an engineering assistant to refine payloads and evasion tactics.
- Supply chain attacks on SaaS vendors and AI model providers, compromising downstream customer data.
- Exploitation of a zero-day WordPress race condition to create rogue admin accounts, enabling persistent access.
- Data exfiltration via Telegram channels, bespoke C2 infrastructure, and doxxing platforms like fafsearch.
Global Impact & Victimology
The campaigns spanned multiple regions, including Europe, the Middle East, Southeast Asia, Africa, and the Persian Gulf, with victims across:
- High-value sectors: Government, finance, energy, and technology.
- Mass-market platforms: Education, retail, healthcare, and SaaS providers.
- Political & media targets: Think tanks, political parties, and news organizations, particularly in Malaysia, Bangladesh, Iran, and Kenya, where Claude was used for election interference and disinformation.
Mitigation Challenges
The attacks highlighted the dual threat of AI-driven automation and supply chain vulnerabilities, requiring organizations to:
- Monitor for unauthorized Claude/AI API usage, enforcing least-privilege access for credentials.
- Detect and block malicious browser extensions (e.g., al-Najm al-thāqib).
- Patch WordPress and SaaS platforms to address race conditions and exposed endpoints.
- Audit AWS EC2 activity for mass APK scans and TruffleHog usage.
- Review supply chain dependencies, ensuring third-party vendors adhere to robust security practices.
The abuse of Claude underscores the evolving threat landscape, where AI-driven automation enables scalable, adaptive cyberattacks with far-reaching consequences.
AWS AI cybersecurity rating report: https://www.rankiteo.com/company/aws-ai
Anthropic cybersecurity rating report: https://www.rankiteo.com/company/anthropicresearch
"id": "AWSANT1789374720",
"linkid": "aws-ai, anthropicresearch",
"type": "Cyber Attack",
"date": "1/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': ['government',
'finance',
'energy',
'technology',
'education',
'healthcare',
'retail',
'media'],
'location': ['Europe',
'Middle East',
'Southeast Asia',
'Africa',
'Persian Gulf',
'Malaysia',
'Bangladesh',
'Iran',
'Kenya'],
'type': ['government',
'finance',
'energy',
'technology',
'education',
'healthcare',
'retail',
'SaaS providers',
'think tanks',
'political parties',
'news organizations']}],
'attack_vector': ['AI automation',
'multi-agent frameworks',
'zero-day exploitation',
'phishing kits',
'malware generation',
'supply chain attacks'],
'data_breach': {'data_exfiltration': ['Telegram channels',
'bespoke C2 infrastructure',
'doxxing platforms (e.g., fafsearch)'],
'file_types_exposed': ['Android APKs'],
'personally_identifiable_information': ['yes'],
'sensitivity_of_data': ['high'],
'type_of_data_compromised': ['credentials',
'embedded secrets',
'personally identifiable '
'information (PII)',
'corporate data',
'political intelligence']},
'description': 'Between late 2025 and mid-2026, threat actors systematically '
'abused Anthropic’s Claude, an advanced generative AI '
'platform, to automate cyberattacks at an unprecedented scale. '
'Adversaries leveraged Claude’s multi-agent capabilities to '
'conduct credential harvesting, supply chain compromises, mass '
'surveillance, and influence operations, targeting sectors '
'including education, energy, finance, government, and '
'technology.',
'impact': {'brand_reputation_impact': ['reputational damage to targeted '
'organizations',
'loss of trust in AI platforms'],
'data_compromised': ['credentials',
'embedded secrets',
'PII',
'corporate data',
'political intelligence'],
'identity_theft_risk': ['high (PII exposure)'],
'operational_impact': ['persistent access via rogue admin accounts',
'data exfiltration',
'supply chain disruptions'],
'systems_affected': ['SaaS platforms',
'WordPress sites',
'Android applications',
'endpoint security products',
'AI model providers']},
'initial_access_broker': {'backdoors_established': ['rogue admin accounts'],
'entry_point': ['WordPress race condition',
'SaaS endpoints',
'Android APKs'],
'high_value_targets': ['government',
'finance',
'energy',
'technology',
'political organizations']},
'lessons_learned': 'The abuse of Claude underscores the evolving threat '
'landscape, where AI-driven automation enables scalable, '
'adaptive cyberattacks with far-reaching consequences. '
'Organizations must enforce least-privilege access, '
'monitor for unauthorized AI API usage, and address supply '
'chain vulnerabilities.',
'motivation': ['espionage',
'financial gain',
'surveillance',
'election interference',
'disinformation'],
'post_incident_analysis': {'corrective_actions': ['enhanced monitoring of AI '
'API usage',
'supply chain security '
'reviews',
'patch management for SaaS '
'and WordPress platforms'],
'root_causes': ['exploitation of AI automation for '
'scalable attacks',
'supply chain vulnerabilities',
'unauthorized API usage',
'zero-day exploitation']},
'recommendations': ['Monitor for unauthorized Claude/AI API usage and enforce '
'least-privilege access for credentials.',
'Detect and block malicious browser extensions (e.g., '
'al-Najm al-thāqib).',
'Patch WordPress and SaaS platforms to address race '
'conditions and exposed endpoints.',
'Audit AWS EC2 activity for mass APK scans and TruffleHog '
'usage.',
'Review supply chain dependencies to ensure third-party '
'vendors adhere to robust security practices.'],
'response': {'containment_measures': ['monitoring for unauthorized Claude/AI '
'API usage',
'blocking malicious browser extensions'],
'enhanced_monitoring': ['auditing AWS EC2 for mass APK scans and '
'TruffleHog usage'],
'remediation_measures': ['patching WordPress and SaaS platforms',
'auditing AWS EC2 activity',
'reviewing supply chain dependencies']},
'threat_actor': ['GTG-20006 (Russian APT29 affiliate / Midnight Blizzard / '
'Cozy Bear)',
'GTG-50014 (ShinyHunters affiliate)',
'GTG-10007 (Chinese-linked group)',
'Commercial surveillance vendors (S2T Unlocking Cyberspace, '
'LKM Company)',
'Iranian paramilitary agencies'],
'title': 'AI-Powered Cyberattacks: Threat Actors Weaponized Anthropic’s '
'Claude for Large-Scale Exploitation',
'type': ['AI-driven cyberattack',
'credential harvesting',
'supply chain compromise',
'mass surveillance',
'influence operations'],
'vulnerability_exploited': ['WordPress race condition',
'exposed SaaS endpoints',
'embedded secrets in Android APKs',
'unauthorized API usage']}