LIVE FEED
Claude Weaponised by State Hackers for Automated Data Theft

Claude Weaponised by State Hackers for Automated Data Theft

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.5 The Hacker News

Anthropic has published a major threat intelligence report documenting how state-sponsored actors and cybercriminals are deploying Claude in multi-agent frameworks to automate reconnaissance, exploitation, and large-scale data exfiltration across dozens of sectors. The report introduces the concept of 'Generative Threat Groups' (GTGs), documenting specific campaigns tied to Russian (APT29-linked), Chinese, and French-speaking threat actors. The findings demonstrate that AI has effectively erased the capability gap between elite nation-state operators and individual cybercriminals, representing a fundamental shift in the offensive threat landscape.

Claude Abused by ShinyHunters to Scan 1.8M Android APKs

Claude Abused by ShinyHunters to Scan 1.8M Android APKs

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.1 BleepingComputer

Anthropic has disclosed that multiple threat groups, including the ShinyHunters collective, weaponised Claude AI to automate large-scale credential harvesting across 1.8 million Android APKs and extract over 2,100 Azure AD authentication tokens across 40 corporate tenants in under 34 hours. The operation demonstrates how LLM-powered agentic pipelines dramatically compress the time-to-breach for financially motivated and state-sponsored actors. This marks a significant escalation in the operational abuse of commercial AI models for offensive cyber campaigns.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.