Theguardian Russia's AI-Driven Cyber Espionage Targets Ukraine and Europe
Article Content
- •Russian hackers used Claude AI for cyber espionage against Ukraine and Europe.
- •Over 20 organizations, including government and military targets, were compromised.
- •AI was used to automate phishing, reconnaissance, and malware evasion techniques.
A Russian-linked hacking group, identified as GTG-20006, has utilized Anthropic's Claude AI to automate cyber espionage against over 20 organizations, primarily in Ukraine and Europe. The group targeted Ukrainian government officials, military personnel, and drone manufacturers through sophisticated phishing and reconnaissance operations. They have successfully compromised email accounts and stolen sensitive data related to military drone technology. The hackers employed AI to enhance their attack methods, including automating malware development and evasion techniques. Reports indicate that the group also breached hotel Wi-Fi networks to intercept communications of individuals connected to Ukraine. Anthropic's findings highlight the growing misuse of AI technologies for state-sponsored cyber operations. The operation is consistent with previous reports linking the group to Russia's Foreign Intelligence Service (SVR). Current assessments indicate that the threat remains active and evolving.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (24)
Following this threat?
Track Gtg-20006 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…