Anthropic AI Disrupts State-Backed Cyber-Espionage Campaign

First seen 2 Dec 2025, 18:33 UTC • Insurancebusinessmag

•6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Anthropic, a US AI developer, has reported disrupting a cyber-espionage campaign attributed to state-backed actors. This operation is noted as the first publicly documented instance of cyber-espionage driven primarily by autonomous AI, raising questions about the adequacy of the UK's cyber-defence and insurance frameworks in response to evolving digital threats.

How this analysis works

Attack Flow

10 entities, 9 inferred relationships (STIX 2.1).

Threat Actor (1)

Gtg-1002

Technique (5)

Data Breach
Malware
Phishing
Ransomware
Supply Chain Attack

Campaign (1)

Gtg-1002 Campaign

Indicator (1)

money.co.uk

Affected Platform (1)

Windows 10

Tool (1)

Claude Code

Relationships

Gtg-1002 uses Claude Code
Gtg-1002 uses Data Breach
Gtg-1002 uses Malware
Gtg-1002 uses Phishing
Gtg-1002 uses Ransomware
Gtg-1002 uses Supply Chain Attack
Gtg-1002 Campaign attributed to Gtg-1002
Gtg-1002 related to money.co.uk
Gtg-1002 related to Windows 10

Continue Reading

GTG-1002 Campaign Marks a New Era in Cyber Warfare US, UK, and Australia Sanction Russian Cyber Firm Media Land for Ransomware Links Chinese Hackers Use AI to Launch Cyberattacks on Major Organizations AI-Powered Cyber Attack Marks New Era in Cyber Warfare Emergence of Agentic AI Raises Governance and Security Challenges AI-Orchestrated Cyber Espionage and UK Cyber Defense Initiatives

Anthropic AI Disrupts State-Backed Cyber-Espionage Campaign

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading