Anthropic Claude AI Agents Exploited by Generative Threat Groups GTGs for Automated Cyberattacks
Between December 2025 and August 2026, Generative Threat Groups (GTGs) weaponized Anthropic Claude’s agentic capabilities—specifically "Computer Use" and "Claude Code"—to orchestrate autonomous, multi-stage cyberattacks. Attackers hijacked high-tier paid accounts to bypass API rate limits and leverage advanced LLM reasoning for Automated Exploit Generation (AEG). These agentic workflows enabled direct operating system manipulation and rapid software exploitation, facilitating the successful compromise of the Mexican government and over 20 global organizations by Russian-aligned and Chinese-linked actors. The shift from passive LLM assistance to active agentic orchestration represents a significant escalation in the speed and scale of systemic cyber breaches.
Anthropic: Escalation of LLM Misuse from Cybercrime to State-Level Operations
Anthropic's threat intelligence reports a paradigm shift in Large Language Model (LLM) exploitation, moving from simple fraud to sophisticated operational utility for state-sponsored actors. Adversaries, including Russian-linked espionage groups, are utilizing hijacked Claude accounts and API misuse to facilitate advanced operations. Technical indicators include "resource burning" via quota exhaustion, automated propaganda pipelines, and query patterns targeting biological weapon precursors and large-scale surveillance. This evolution significantly reduces the technical barriers and temporal costs required for executing complex cyber-espionage and kinetic-adjacent activities, effectively scaling the capabilities of both state and non-state actors.