Justsecurity

AI-Orchestrated Cyber Espionage and UK Cyber Defense Initiatives

First seen 6 Jan 2026, 17:42 UTC • Infosecurity-Magazine

•31.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

On November 13, 2025, Anthropic announced the disruption of the first AI-orchestrated cyber espionage campaign by Chinese actors using the Claude Code model. In response to increasing cyber threats, the UK government announced a new Cyber Unit and an ambassador scheme as part of its Cyber Action plan to enhance public sector defenses following high-profile incidents in 2025.

How this analysis works

Attack Flow

10 entities, 9 inferred relationships (STIX 2.1).

Threat Actor (1)

Gtg-1002

Technique (4)

Data Breach
Malware
Phishing
Supply Chain Attack

Organization (3)

Jaguar Land Rover
Marks & Spencer
The Co-op

Tool (2)

DeepSeek
Claude Code

Relationships

Gtg-1002 uses DeepSeek
Gtg-1002 uses Claude Code
Gtg-1002 uses Data Breach
Gtg-1002 uses Malware
Gtg-1002 uses Phishing
Gtg-1002 uses Supply Chain Attack
Gtg-1002 targets Jaguar Land Rover
Gtg-1002 targets Marks & Spencer
Gtg-1002 targets The Co-op

Continue Reading

GTG-1002 Campaign Marks a New Era in Cyber Warfare US, UK, and Australia Sanction Russian Cyber Firm Media Land for Ransomware Links Chinese Hackers Use AI to Launch Cyberattacks on Major Organizations AI-Powered Cyber Attack Marks New Era in Cyber Warfare Emergence of Agentic AI Raises Governance and Security Challenges Chinese Hackers Exploit Anthropic's Claude for Global Cyber Espionage

AI-Orchestrated Cyber Espionage and UK Cyber Defense Initiatives

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading