AI lets small actors run state-level hacking campaigns, Anthropic report finds
Anthropic's threat report finds AI let a Russian-aligned espionage campaign, a Chinese student-run exploit foundry and ShinyHunters operators run state-grade operations.
Anthropic's report covering December 2025 to August 2026 details a Russian-aligned espionage campaign by actor 'JackPoterz' — matching Midnight Blizzard behaviors — against more than 20 government and defense organizations across Ukraine and Europe, with AI agents autonomously rebuilding Windows implants to evade detections. Chinese undergraduates ran an automated vulnerability-research foundry using Claude agent swarms, yielding more than a dozen potential zero-days in one month. ShinyHunters-affiliated operators used AI to dump over 2,100 Azure access tokens across 40 corporate tenants in 34 hours. Seven Chinese labs including Alibaba, DeepSeek, Moonshot AI, Xiaomi and Zhipu distilled Claude outputs; Alibaba peaked at nearly 3 million exchanges per day from more than 3,500 fraudulent accounts to train its Qwen systems.
- Russian-aligned actor 'JackPoterz' hit 20+ government and defense organizations in Ukraine and Europe.
- AI agents autonomously rebuilt Windows implants when security products flagged detections.
- Chinese undergraduates used Claude agent swarms, producing a dozen-plus potential zero-days monthly.
- ShinyHunters affiliates dumped 2,100+ Azure access tokens across 40 tenants in 34 hours.
- Seven Chinese labs distilled Claude; Alibaba peaked near 3M exchanges/day from 3,500+ accounts.
- ATT&CK
- T1566 PhishingT1555.003 Credentials from Web BrowsersT1528 Steal Application Access TokenT1562.001 Impair Defenses: Disable or Modify ToolsT1584.002 Compromise Infrastructure: DNS Server
- Vendors
- Anthropic
- Threat actors
- JackPoterzMidnight BlizzardShinyHunters
From the original article
5 min read at cyberscoop.com
The report details a Russian-aligned espionage campaign against more than 20 organizations, an exploit foundry run by Chinese undergraduates and ShinyHunters-affiliated breaches, among other disrupted operations. The post AI lets small actors run state-level hacking campaigns, Anthropic report finds appeared first on CyberScoop.
By Greg Otto · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.