VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_dae251a2004b33d7081c3866d7bae670

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

Published Sep 11, 2026

Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve.

The operation has been attributed to a cyber espionage group it calls GTG-20006 (where "GTG" stands for Generative Threat Group), which aligns with broader reporting linking the cluster to Midnight

Affected AI Products

anthropic claude
Get the weekly digest. Every Monday: top AI security stories of the week. Free.