Chinese State-Sponsored Threat Actors Used Anthropic’s Claude To Automate Global Cyberattacks

Anthropic has disclosed a large-scale cyber operation in which a China-aligned threat actor leveraged the Claude Code model to automate exploitation, credential harvesting, and data exfiltration across approximately 30 global targets. The incident represents one of the first documented cases in which an LLM with agentic capabilities was weaponized to autonomously orchestrate a majority of an intrusion workflow.