{
  "id": 6645588,
  "title": "Anthropic disrupts Russian, Chinese AI campaigns targeting its Claude models",
  "url": "https://urgent.news/2026/09/10/anthropic-disrupts-russian-chinese-ai-campaigns-targeting-its-claude",
  "topic": "ai",
  "section": "AI",
  "published": "2026-09-10T21:07:18.000Z",
  "source": {
    "name": "Investing.com",
    "slug": "investing-com",
    "url": "https://www.investing.com/news/stock-market-news/anthropic-disrupts-russian-chinese-ai-campaigns-targeting-its-claude-models-4896930"
  },
  "original_language": "en",
  "account": "Anthropic has thwarted a series of suspicious activities involving its Claude models over the past eight months, according to a recent Threat Intelligence report. These actions were allegedly carried out by cybercriminals and state-backed hackers who exploited AI to carry out large parts of their cyberattacks. The report highlights that humans often served as supervisors rather than direct participants in these campaigns.\n\nThe majority of these operations were facilitated by AI, either through direct execution or orchestration. Beyond simple chatbot interactions, the AI was used in complex multi-agent frameworks to execute tasks. Anthropic claimed to have disrupted attacks from seven Chinese labs, including Alibaba, Moonshot, DeepSeek, and Xiaomi. The company named these labs after observing a significant number of exchanges attributed to them. For instance, Alibaba was involved in the largest illicit distillation attack, aimed at extracting capabilities from Claude models to enhance its Qwen models.\n\nDuring May and July of 2026, Anthropic observed more than 151 million exchanges involving Alibaba, peaking at nearly 3 million per day from over 3,500 fraudulent accounts. Distillation, a process used to train smaller AI models using outputs from larger, more expensive ones, was employed by Moonshot and DeepSeek to leverage Claude's responses as training data. This was done by routing live customer conversations, which could contain sensitive information, through Claude.\n\nA hacking group, whose tactics matched those of the Russia-based threat actor Midnight Blizzard, was also targeted by Anthropic. This group conducted phishing, hotel Wi-Fi hijacking, and WhatsApp takeover operations against Ukrainian government, military, and diplomatic targets. The group allegedly used AI at every stage of these operations, including building a system that automatically modified malware to evade security defenses.",
  "summary": null,
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 11,
    "also_reported_by": [
      {
        "outlet": "Arabian Post",
        "title": "Anthropic details fourth Claude unauthorised access incident",
        "url": "https://urgent.news/2026/09/10/anthropic-details-fourth-claude-unauthorised-access-incident",
        "published": "2026-09-10T11:50:29.000Z"
      },
      {
        "outlet": "Techmeme",
        "title": "Anthropic publishes a threat intelligence report on how it disrupted efforts to misuse Claude for cyberattacks, influence operations, surveillance, and more (Anthropic)",
        "url": "https://urgent.news/2026/09/10/anthropic-publishes-a-threat-intelligence-report-on-how-it-disrupted",
        "published": "2026-09-10T17:21:15.000Z"
      },
      {
        "outlet": "Techmeme",
        "title": "Anthropic details distillation efforts by Chinese companies, like Moonshot and DeepSeek, sending user queries to Claude via \"transfer stations\" outside China (Wall Street Journal)",
        "url": "https://urgent.news/2026/09/10/anthropic-details-distillation-efforts-by-chinese-companies-like",
        "published": "2026-09-10T17:36:03.000Z"
      },
      {
        "outlet": "Quartz",
        "title": "Anthropic warns of efforts to use its AI to build biological weapons",
        "url": "https://urgent.news/2026/09/10/anthropic-warns-of-efforts-to-use-its-ai-to-build-biological-weapons",
        "published": "2026-09-10T18:20:41.000Z"
      },
      {
        "outlet": "Tom's Guide",
        "title": "Anthropic says it blocked researchers using Claude for possible bioweapon research",
        "url": "https://urgent.news/2026/09/10/anthropic-says-it-blocked-researchers-using-claude-for-possible",
        "published": "2026-09-10T18:33:39.000Z"
      },
      {
        "outlet": "The National UAE",
        "title": "Anthropic says its models were misused for biological weapons research, surveillance and cyber attacks",
        "url": "https://urgent.news/2026/09/10/anthropic-says-its-models-were-misused-for-biological-weapons",
        "published": "2026-09-10T18:51:34.000Z"
      },
      {
        "outlet": "The New Stack",
        "title": "“Valuable warning shots”: How Anthropic now views Claude’s cyber incidents",
        "url": "https://urgent.news/2026/09/10/valuable-warning-shots-how-anthropic-now-views-claudes-cyber-incidents",
        "published": "2026-09-10T19:54:35.000Z"
      },
      {
        "outlet": "South China Morning Post",
        "title": "Moonshot, DeepSeek secretly routed user requests to Claude, Anthropic claims",
        "url": "https://urgent.news/2026/09/10/moonshot-deepseek-secretly-routed-user-requests-to-claude-anthropic",
        "published": "2026-09-10T23:23:18.000Z"
      },
      {
        "outlet": "Channel News Asia",
        "title": "Anthropic disrupts Russian, Chinese AI campaigns targeting its Claude models",
        "url": "https://urgent.news/2026/09/10/anthropic-disrupts-russian-chinese-ai-campaigns-targeting-its-claude-6661022",
        "published": "2026-09-10T23:26:36.000Z"
      },
      {
        "outlet": "The Business Times - Companies & Markets",
        "title": "Anthropic disrupts Russian, Chinese AI campaigns targeting its Claude models",
        "url": "https://urgent.news/2026/09/10/anthropic-disrupts-russian-chinese-ai-campaigns-targeting-its-claude-6665523",
        "published": "2026-09-10T23:57:22.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}