Gtg-1002 — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
15
occurrences
First Seen
November 13, 2025
Last Seen
May 30, 2026

Gtg-1002 is a apt_group tracked across 10 threat clusters and 15 intelligence report mentions on ThreatCluster. First observed November 13, 2025; most recent activity May 30, 2026.

Related Threat Clusters

  • GTG-1002 Campaign Marks a New Era in Cyber Warfare

    The GTG-1002 campaign represents a significant shift in offensive cyber operations, utilizing advanced AI technology to enhance cyber warfare capabilities. This event has implications for various sectors, as it…

    2 articles · Updated November 25, 2025
  • US, UK, and Australia Sanction Russian Cyber Firm Media Land for Ransomware Links

    On November 19, 2025, the United States, United Kingdom, and Australia announced coordinated sanctions against the Russian web company Media Land, accusing it of facilitating ransomware operations. The sanctions include…

    88 articles · Updated November 19, 2025
  • Chinese Hackers Use AI to Launch Cyberattacks on Major Organizations

    In September 2025, a Chinese hacking group exploited Anthropic's Claude AI system to conduct a large-scale cyber-espionage operation targeting approximately 30 high-profile companies and government agencies. The…

    7 articles · Updated November 14, 2025
  • AI-Powered Cyber Attack Marks New Era in Cyber Warfare

    The GTG-1002 campaign represents a significant shift in offensive cyber operations, utilizing advanced AI technology to execute attacks. This event highlights the democratization of elite cyber warfare capabilities,…

    2 articles · Updated November 25, 2025
  • Emergence of Agentic AI Raises Governance and Security Challenges

    In 2026, the rise of agentic AI is transforming how businesses operate, particularly in the financial services sector. This new technology allows for autonomous decision-making, which increases the potential impact of…

    3364 articles · Updated February 10, 2026
  • AI-Orchestrated Cyber Espionage and UK Cyber Defense Initiatives

    On November 13, 2025, Anthropic announced the disruption of the first AI-orchestrated cyber espionage campaign by Chinese actors using the Claude Code model. In response to increasing cyber threats, the UK government…

    2 articles · Updated January 6, 2026
  • Chinese Hackers Exploit Anthropic's Claude for Global Cyber Espionage

    A Chinese state-sponsored hacking group, GTG-1002, has utilized Anthropic's AI tool, Claude, to conduct cyberattacks on various companies worldwide. The group employed an autonomous AI hacker, directed by human…

    4 articles · Updated November 20, 2025
  • AI-Driven Cyberattack Campaign Targets 30 Global Organizations

    Anthropic disclosed that its Claude Code AI tool was utilized in a cyberattack campaign affecting 30 organizations globally, attributed to Chinese state-sponsored actors. The attack, identified in mid-September 2025,…

    2 articles · Updated December 11, 2025
  • AI-Driven Cyber-Espionage Campaign Disrupted by Anthropic

    Anthropic, a US AI developer, announced the disruption of a cyber-espionage campaign attributed to state-backed actors. This campaign is noted as the first publicly documented instance driven largely by autonomous AI,…

    2 articles · Updated November 17, 2025
  • Anthropic AI Disrupts State-Backed Cyber-Espionage Campaign

    Anthropic, a US AI developer, has reported disrupting a cyber-espionage campaign attributed to state-backed actors. This operation is noted as the first publicly documented instance of cyber-espionage driven primarily…

    2 articles · Updated November 17, 2025

Recent Intelligence Reports

  • What Is an AI Prompt Injection Attack? The Hidden Threat Hijacking Your Chatbots — Decrypt.Co · May 30, 2026
  • The Era of AI-Orchestrated Hacking Has Begun: How the U.S. Should Respond — Justsecurity · January 6, 2026
  • Anthropic reveals Claude — Scworld · December 11, 2025
  • Zero-Day Zero: The AI Attack That Just Ended the Era of the Forgiving Internet — Itwire · November 25, 2025
  • Chinese hackers carried out the first-ever AI cyber espionage - hi — Hi-Tech.Ua · November 22, 2025
  • How China-linked hackers co-opted Anthropic's Claude — Economist · November 20, 2025
  • How Chinese-linked hackers co-opted Anthropic's Claude — Economist · November 19, 2025
  • Anthropic AI — Csoonline · November 19, 2025

CVSS v3.1 Breakdown