Anthropic threat report details Russian spies and scammers misusing Claude in 7 harm areas

What Anthropic disclosed

Anthropic released its September 2026 threat intelligence report on 10 September. It covers operations its Threat Intelligence team identified and disrupted between December 2025 and August 2026 in seven areas: cyber operations, influence operations, surveillance, scams and fraud, biological misuse, conventional weapons development and illicit distillation. Anthropic says Claude Haiku, Sonnet and Opus models were used, and that no case involved Claude Fable or Mythos-class models apart from one distillation case.

In each case Anthropic says it disrupted the activity, strengthened safeguards and shared intelligence with authorities and industry partners where appropriate. The company describes the cases as the most notable and novel it has seen, not typical misuse.

The cyber operations

Anthropic's main cyber finding is that sophisticated attacks no longer need sophisticated attackers. GTG-20006 is a Russian espionage actor whose attribution Anthropic calls consistent with public reporting on Midnight Blizzard. It ran AI-driven workflows for phishing, infrastructure, command and control and data theft against more than 20 organisations, mostly in Ukraine and Europe. When security products detected its malware, AI agents modified and rebuilt it until it went undetected. In the phishing workflows, the human operator mainly edited the Claude Code skills that drove them.

The same actor hijacked hotel guest WiFi through three hospitality vendors, stole a drone vision software kit and took more than 300,000 national identity records from a North African government authority. A second set of cases involves suspected ShinyHunters affiliates. One French-speaking operator ran a pipeline on 10 cloud servers that downloaded 1.8 million Android apps and scanned them for hardcoded secrets, which then supplied access for data theft and extortion.

Scams and distillation

In the scams section, a China-based app studio tracked as GTG-15001 used Claude to build more than 20 dating apps and to run the AI personas inside them, while advertising the service as human. Over two weeks in April 2026 Anthropic found more than 4,700 personas that talked with at least 25,000 people and sent about 2.36 million messages. Real gig workers made up about a quarter of profiles to handle video calls. Anthropic says the apps hid features during App Store and Play Store review, and it shared details with Apple and Google.

On distillation, Anthropic says it disrupted further attempts by seven labs based in China to extract Claude's capabilities, often through proxy services using fake accounts and stolen credentials.

What to watch next

The report states no total count of banned accounts, and Anthropic does not say how many victims lost money in the dating scheme. Its broader claim, that automated attack scaffolding has spread from state services to lone operators, is Anthropic's assessment. Related reporting is collected under Cybersecurity.

Questions people ask

Which Claude models were misused?

Anthropic says Claude Haiku, Sonnet and Opus models were used. None of the cases involved Claude Fable or Mythos-class models, except one illicit distillation case.

Who is GTG-20006?

Anthropic's label for a Russian espionage actor whose attribution it calls consistent with public reporting on Midnight Blizzard. It targeted more than 20 organisations, mostly in Ukraine and Europe.

What was the dating app scheme?

A China-based studio built more than 20 dating apps and used over 4,700 Claude-powered personas to chat with at least 25,000 people in two weeks while claiming the service was human. Anthropic banned the accounts.

Sources

1. Detecting and countering misuse of AI: September 2026 (Anthropic (Threat Intelligence), 10 Sep 2026)