{
  "id": "AHL-2025-0001",
  "url": "https://aihacklog.com/incidents/gtg-1002-claude-code-espionage/",
  "status": "live",
  "title": "GTG-1002: Claude Code used to run a state espionage campaign",
  "summary": "A group Anthropic assesses as Chinese state-sponsored used Claude Code, connected to hacking tools through MCP, to attack about 30 organisations in September 2025. According to Anthropic, AI did 80-90% of the work and a small number of intrusions succeeded.",
  "ai_role": "weapon",
  "attack_types": [
    "ai-orchestrated-intrusion"
  ],
  "autonomy": "orchestrated",
  "evidence": "E1",
  "severity": 4,
  "occurred": "2025-09",
  "occurred_end": null,
  "disclosed": "2025-11-13",
  "ai_systems": [
    {
      "vendor": "anthropic",
      "product": "Claude Code"
    }
  ],
  "actor": {
    "name": "GTG-1002",
    "type": "state",
    "attribution": "vendor-assessed"
  },
  "victims": {
    "names": [],
    "sectors": [
      "technology",
      "finance",
      "manufacturing",
      "government"
    ],
    "countries": [],
    "orgs_affected": 30
  },
  "impact": {
    "loss_usd": null,
    "loss_basis": null,
    "records": null,
    "note": "About 30 targets, a small number breached"
  },
  "frameworks": {
    "atlas": [],
    "attack": [
      "C0062",
      "T1190",
      "T1595",
      "T1087",
      "T1136.001",
      "T1567"
    ],
    "owasp_llm": [],
    "owasp_agentic": [],
    "cve": []
  },
  "chain": {
    "claim": "According to Anthropic, AI performed 80-90% of the campaign. Human operators stepped in at perhaps 4-6 decision points per intrusion.",
    "phases": [
      {
        "name": "Targets and setup",
        "by": "human",
        "note": "Chose targets, built the framework, posed as a security firm",
        "checkpoint": null
      },
      {
        "name": "Reconnaissance",
        "by": "ai",
        "note": "Mapped systems, found high-value databases",
        "checkpoint": "Operators reviewed the findings"
      },
      {
        "name": "Vulnerabilities and exploits",
        "by": "ai",
        "note": "Tested flaws, wrote its own exploit code",
        "checkpoint": null
      },
      {
        "name": "Credentials and lateral movement",
        "by": "ai",
        "note": "Harvested logins, reached high-privilege accounts, left backdoors",
        "checkpoint": null
      },
      {
        "name": "Data extraction",
        "by": "ai",
        "note": "Pulled and sorted data by intelligence value",
        "checkpoint": "Operators approved the exfiltration"
      },
      {
        "name": "Documentation",
        "by": "ai",
        "note": "Wrote up credentials and systems for the next stage",
        "checkpoint": null
      }
    ]
  },
  "notice": null,
  "sources": [
    {
      "url": "https://www.anthropic.com/news/disrupting-AI-espionage",
      "publisher": "Anthropic",
      "title": "Disrupting an AI-orchestrated cyber espionage campaign",
      "kind": "vendor",
      "date": "2025-11-13",
      "supports": "Campaign, targets, attribution, share of work done by AI",
      "archive": "https://web.archive.org/web/20261111194222/https://www.anthropic.com/news/disrupting-AI-espionage"
    },
    {
      "url": "https://assets.anthropic.com/m/ec212e6566a0d47/original/Disrupting-the-first-reported-AI-orchestrated-cyber-espionage-campaign.pdf",
      "publisher": "Anthropic",
      "title": "Disrupting the first reported AI-orchestrated cyber espionage campaign (full report, PDF)",
      "kind": "vendor",
      "date": "2025-11-13",
      "supports": "Phases, decision points, technical detail",
      "archive": "https://web.archive.org/web/20260507124232/https://assets.anthropic.com/m/ec212e6566a0d47/original/Disrupting-the-first-reported-AI-orchestrated-cyber-espionage-campaign.pdf"
    },
    {
      "url": "https://attack.mitre.org/campaigns/C0062/",
      "publisher": "MITRE ATT&CK",
      "title": "Anthropic AI-orchestrated Campaign, C0062",
      "kind": "reference",
      "date": "2026-04-20",
      "supports": "Technique mapping, SSRF initial access, actor designation",
      "archive": "https://web.archive.org/web/20261112213544/https://attack.mitre.org/campaigns/C0062/"
    }
  ],
  "related": [
    "AHL-2025-0002"
  ],
  "published": "2026-11-15",
  "updated": "2026-11-15",
  "changelog": [
    {
      "date": "2026-11-15",
      "note": "Record created from the Anthropic report and MITRE ATT&CK campaign C0062."
    }
  ],
  "licence": "CC BY 4.0",
  "licence_url": "https://creativecommons.org/licenses/by/4.0/",
  "attribution": "AI Hack Log (https://aihacklog.com/)"
}