Russian espionage group used Claude to build malware, stealing 300K identity records
maier_ak · x · 2026-09-16
Anthropic's September 2026 threat briefing reveals that Midnight Blizzard, a suspected Russian espionage group, used Claude to build a phishing kit, register domains, and create malware families like PowerChrome and MiniPlasma. An AI agent rewrote code after detections, stealing over 300,000 identity records. The briefing covers seven AI-misuse domains—cyber ops, influence, surveillance, scams, bio, weapons, and illicit model distillation—and publishes IOCs including domains, IPs, hashes, and Telegram IDs.
Related event: Anthropic's 154-page threat brief details how hackers weaponized Claude(5 posts)→
More from Safety
- Mozilla: Middle Powers Should Build AI "Roads" Not "Engines" — Bet on the Harness Layer — KeeganMcB · 2026-09-16
- AI safety discourse fixates on paperclips while ignoring power overconcentration, argues prominent voice — beffjezos · 2026-09-16
- New paper argues AI subjective time divergence is an overlooked digital-minds safety risk — SirDidymus · 2026-09-16
- Reported FTC probe: OpenAI may face liability over Hugging Face incident — AIFlow_ML · 2026-09-16
- Bill Kristol: AI guardrails without enforcement, liability and penalties aren't real guardrails — Miles_Brundage · 2026-09-16
- 53 MCP servers scanned: 36% graded D/F, mostly for over-permissioned scope — BrilliantSecret143 · 2026-09-16