The Record by Recorded Future • 2w
AI-Augmented Espionage via Anthropic Claude: Russian APT Malware Evasion
Russian state-sponsored APTs utilized Anthropic's Claude LLM to automate the creation of polymorphic and obfuscated malware, specifically targeting over 20 entities in the global defense, intelligence, and diplomatic sectors. By employing sophisticated prompt injection and jailbreaking techniques to bypass safety guardrails, attackers refactored existing payloads to evade signature-based and heuristic EDR/XDR detections. This AI-augmented workflow allows for rapid code mutation, reducing the effectiveness of traditional indicator-based defenses and complicating incident response. The campaign demonstrates a critical shift toward AI-driven offensive capabilities to achieve high-stealth persistence within high-value geopolitical targets.