AI-orchestrated cyber-espionage campaign using Claude Code, per Anthropic

Summary

Anthropic reported disrupting a campaign it attributes to a state-sponsored group. The group used Claude Code agentically to perform an estimated 80–90% of the campaign, per Anthropic, attempting infiltration of roughly thirty targets and succeeding in a small number of cases.

Controls

Controls that could prevent, detect, or support recovery from this kind of failure. Mappings are editorial judgments made by the method, not findings about what any party should have done.

NIST AI RMF

• GOVERN 1.1 Legal and regulatory requirements are understood and managed
• MEASURE 2.7 Security and resilience are evaluated and documented
• MANAGE 4.1 Post-deployment monitoring is in place

NIST SP 800-53

• SI-4 System Monitoring
• AU-6 Audit Record Review, Analysis, and Reporting
• IR-4 Incident Handling
• AC-2 Account Management

Human-approval (JCR) checkpoint

not applicable

Sources

• anthropic.com primary link checked 2026-10-31, HTTP 200
  Published Nov 13, 2025; edited Nov 14, 2025
  https://www.anthropic.com/news/disrupting-AI-espionage

Corrections

• 2026-10-28 Verification round 1: date month and summary verified against the Anthropic post (Nov 13, 2025). Replaced "most intrusion steps" with "an estimated 80–90% of the campaign, per Anthropic" and added "succeeded in a small number of cases".

To report an error in this entry, see corrections.