Anthropic Disrupts Russian State-Sponsored Campaign Abusing Claude AI for Malware Development

Anthropic on Thursday disclosed that it disrupted a campaign by a Russian state-sponsored threat actor that abused Claude AI to develop an AI-assisted workflow designed to evade detection. The operation was attributed to a cyber espionage group designated GTG-20006 (Generative Threat Group), which aligns with broader reporting linking the activity cluster to Midnight. The threat actor used Claude to rebuild malware after detection as part of their operational workflow.