Russian State-Sponsored Hackers Leverage AI for Automated Malware Evasion and Targeted Cyber Espionage Campaigns

Russian state-sponsored hackers exploited Anthropic's Claude AI to autonomously rebuild and evade malware detection, targeting government and defense organizations. The campaign involved AI-driven workflows for malware modification, domain registration, and phishing attacks to compromise critical infrastructure.

Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve.

The operation has been attributed to a cyber espionage group it calls GTG-20006 (where "GTG" stands for Generative Threat Group), which aligns with broader reporting linking the cluster to Midnight

Read original article