Anthropic claims that groups linked to Russia and China tried to abuse Claude’s AI model from December 2025 through August 2026 for malicious purposes. The company recorded various forms of artificial intelligence misuse, including cyber and influence operations, surveillance, scams, development of biological and conventional weapons, and model distillation.
During this eight-month period, Anthropic apparently disrupted several activities linked to the ShinyHunters collective, which has been infamous for large-scale data theft attacks typically initiated through social engineering and account compromise. There was also an alleged French-speaking member of the group who used the handle ‘frkoo’ and distributed a credential-harvesting pipeline across 10 AWS EC2 instances that downloaded from multiple stores and scanned 1.8 million Android APKs for secrets.
The company explains that “this pipeline mass-downloaded 1.8 million distinct Android APKs from multiple app-store sources, decompiled them, and scanned for hardcoded secrets with TruffleHog.”
These are fast-paced attacks, too: with Claude AI, a suspected ShinyHunters threat actor took just 34 hours to extract authentication data and obtain more than 2,100 sets of Azure AD authentication tokens linked to over 40 separate corporate Microsoft tenants. Anthropic says that “AI agents performed nearly all of the work.”
AI-assisted malicious attacks are only going to increase
Unfortunately, as useful as AI can be, there will be bad actors using it for malicious purposes. As AI continues to improve and become more useful, it’s going to get easier for bad actors to use AI agents like Claude to carry out malicious attacks.
This is why it’s more important than ever to stay vigilant. Google pushing to make it harder to sideload APKs is also very important, as that’s the number one way these bad actors get onto your device and steal info. As always, make sure the APK you’re installing comes from a reputable source, and not just a random link on the internet.
The post Anthropic Says Russia and China-Linked Groups Used Claude for Cyberattacks and Weapons Development appeared first on Android Headlines.
