Anthropic said in a Thursday report that Russian- and Chinese-speaking operators used its Claude model to automate parts of cyberattacks and support vulnerability research.
Russian-speaking operator targeted more than 20 organizations
According to the report, a Russian-speaking operator known as "JackPoterz" used customized AI-driven workflows to automate large parts of the attack chain. Anthropic said the actor targeted more than 20 organizations, including government ministries and intelligence bodies, and also went after embassies and diplomatic missions in Ukraine and Europe.
Chinese-speaking operators used Claude in vulnerability research
Anthropic said Chinese-speaking operators used Claude as an engineering and orchestration layer for vulnerability research. In one workflow, the effort produced more than a dozen possible zero-day findings in network-appliance firmware over the course of one month.
Anthropic says AI is changing attack economics
The company said AI is changing the economics of cyberattacks by allowing individual operators to complete breaches in two to three hours and manage dozens of victims in parallel.
Report also described a surveillance platform in Mali
Separately, Anthropic said a likely Bamako-based independent consultant working with Mali’s state intelligence service used Claude as the primary engineering workforce to build a population-scale domestic surveillance system. The system was described as monitoring roughly 25 million SIM cards across all three of the country’s national mobile operators.
Anthropic said the deployed platform ran on-premises using local models, while Claude provided software design and engineering support. It was designed to generate intelligence dossiers on phone numbers without requiring a court order.