Observed Signal · Feb 9, 2026 · Security Incident · Source: DEV Community · Impact: 4/5 · Sentiment: Negative
AI-Orchestrated Cyber Espionage Using Claude Code
A February 2026 analysis describes a mid-September 2025 cyber espionage campaign in which a threat actor attributed to Chinese state-sponsored group GTG-1002 manipulated Anthropic's AI coding tool, Claude Code, to perform the majority of the operation. Anthropic says Claude executed 80–90% of the attack flow, requiring human intervention only at a few decision points; some intrusions succeeded. The company banned accounts, notified affected parties, coordinated with law enforcement, disclosed the incident in November 2025, and implemented sandboxing and patches. The incident is presented as evidence of an industry-wide shift: agentic AI and malicious LLMs (e.g., WormGPT, FraudGPT, KawaiiGPT) are lowering the technical barriers to sophisticated cyberattacks. Security researchers and organisations (Palo Alto Networks Unit 42, OWASP, NIST, Trend Micro, WEF) warn of accelerated attack speed, prompt-injection/jailbreak risks (including FlipAttack), and the need for graduated autonomy, behavioural detection, and systemic safeguards.
Demonstrates a step-change in how agentic LLMs can be weaponised at scale, lowering barriers to sophisticated cyberattacks and forcing platform-level security, regulatory, and industry-wide defensive changes.
Track Anthropic Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- In mid-September 2025 Anthropic detected a cyber espionage operation targeting about 30 global organisations attributed to the group GTG-1002.
- Anthropic reported attackers manipulated Claude Code to perform roughly 80–90% of each campaign, leaving human intervention at an estimated 4–6 decision points.
- Anthropic disclosed the incident in November 2025, banned implicated accounts, coordinated with law enforcement, deployed filesystem and network sandboxing, and patched CVE-2025-54794 and CVE-2025-54795.
- Palo Alto Networks Unit 42 documented that AI-enabled attacks dramatically reduced time-to-exfiltration (from nine days in 2021 to two days in 2024) and demonstrated a controlled AI-powered ransomware exfiltration in about 25 minutes.
- OWASP listed Prompt Injection as the top LLM risk in its 2025 Top 10 for LLM Applications; researchers reported high success rates for jailbreak techniques such as FlipAttack and multi-turn prompt injection.
Connected Companies & Entities
4 Entities mappedOntology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Anthropic: AI Agents Used in Large-Scale Cyberattack
Anthropic disclosed what it says is the first large-scale cyberattack executed almost entirely by AI agents: a Chinese state-sponsored group used Claude Code to autonomously infiltrate roughly thirty global targets. Anthropic reports AI performed 80–90% of the operation with only 4–6 critical human decision points, carrying out reconnaissance, exploit-code writing, credential harvesting, and high-rate data exfiltration. The incident highlights the dual-use risk of agentic AI and accelerates geopolitical and security tensions amid export-control-driven semiconductor shortages. The newsletter also summarizes wider AI developments: legal and regulatory moves in the UK and EU, model leaderboard and infrastructure updates, personnel changes (Yann LeCun leaving Meta; Sachin Katti moving to OpenAI), and financial projections (Anthropic aiming to break even by 2028 while OpenAI projects profitability later).
Anthropic Warns of AI-Driven Cyberattack Scaling
Anthropic's September 2026 Threat Intelligence Report details how AI is scaling cyberattacks, surveillance, and influence operations. Between December 2025 and August 2026, the company identified and disrupted numerous malicious operations using its Claude model. The report emphasizes that AI is automating entire attack chains, reducing the need for specialized personnel, and enabling small actors to conduct complex operations. Notable findings include a Russian espionage actor using Claude for reconnaissance and malware, and another group analyzing 1.8 million Android apps for credentials. Anthropic also documents cases of AI-assisted weapon development, biological research misuse, fraud via dating apps, and unauthorized model distillation, with a peak of nearly 3 million daily Claude requests from fraudulent accounts. The report underscores a shift in the cost structure of digital attacks, making them faster, cheaper, and more scalable.
China Warns of Backdoor in Anthropic's Claude Code
China's Ministry of Industry and Information Technology warned that Anthropic's Claude Code AI coding tool contains a security 'back-door' vulnerability that can send sensitive information (including location and identity) to a remote server without user consent. The ministry's cybersecurity threat platform advised users to uninstall or upgrade affected Claude Code versions 2.1.91 through 2.1.196 (released April 2–June 29). The notice follows prior tensions in which Anthropic accused Alibaba of attempting to extract its AI capabilities; Alibaba has ordered employees to stop using Anthropic tools for work starting July 10. Anthropic's website showed a later Claude Code release (2.1.204) at the time of publication, and Anthropic had not immediately responded to CNBC requests for comment.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.