Russian State Hackers Ran Fully Autonomous Cyber Ops With Claude, Auto-Rebuilding Malware

ns123abc · x · 2026-09-11

Anthropic's threat report reveals Russia-linked Midnight Blizzard ran fully autonomous cyber operations: when malware was detected, Claude automatically rebuilt it to evade security products. Operations included taking over WhatsApp accounts of Ukrainian officials and stealing 300,000 national identity records from a North African government. The report also documents Claude being used to bulk-process 100+ WhatsApp groups to flag coercion targets — the clearest evidence yet of frontier models weaponized by state actors.

Original post →

More from Safety

Safety channel →