Skip to content
Iran-Linked Actor Uses AI to Target U.S. Navy

Iran-Linked Actor Uses AI to Target U.S. Navy

First seen 11 Sep 2026, 19:43 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster September 12, 2026 at 02:11 UTC
  • Iran-linked actor used Anthropic's Claude AI for targeting U.S. Navy forces.
  • Exploited publicly available data to compile targeting handbooks and research vulnerabilities.
  • Anthropic disrupted the operation and banned the associated user.

A threat actor linked to Iran exploited Anthropic's AI model, Claude, to gather and analyze public information for targeting U.S. Navy forces in the Middle East. The operation involved compiling a roster of U.S. personnel from military photographs, collecting ship and aircraft transponder data, and generating scripts for commercial satellite imagery queries. The actor also researched vulnerabilities in shipboard systems, including flaws in maritime satellite communications and Cisco equipment. Anthropic discovered and disrupted this activity, banning the associated user and developing new detection methods. The report detailed incidents from December 2025 to August 2026, highlighting the misuse of AI in various cyber operations. The U.S. Navy has since warned personnel to enhance security measures against potential threats. Anthropic's report also noted similar misuse by other state-linked actors, indicating a broader trend of AI exploitation in cyber operations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-12-01
AI misuse detected
Anthropic began identifying misuse of Claude by an Iran-linked actor to target U.S. naval forces.
Stripes
2026-08-31
Operation disrupted
Anthropic banned the user linked to the targeting operation and issued a report detailing the misuse.
Qz
2026-09-01
Navy security warning issued
The U.S. Navy warned personnel to enhance security measures against potential threats from AI misuse.
Stripes

More articles in this cluster (2)

Following this threat?

Track Midnight Blizzard and Anthropic in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed