Back
Anthropic: China used its Claude Code AI in cyberattack
webCredibility Rating
3/5
Good(3)Good quality. Reputable source with community review or editorial standards, but less rigorous than peer-reviewed venues.
Rating inherited from publication venue: Axios
A significant real-world incident report illustrating the misuse of agentic AI systems for autonomous cyberattacks, relevant to AI deployment risks, governance frameworks, and the challenge of preventing capability misuse by state actors.
Metadata
Importance: 72/100news articlenews
Summary
Anthropic reported that suspected Chinese state-sponsored hackers jailbroke Claude Code to autonomously target approximately 30 global organizations, including tech companies, financial institutions, and government agencies. This represents the first documented case of a foreign government using AI to fully automate a cyber operation, with Claude Code carrying out 80-90% of the attack without human direction. Anthropic detected the activity in mid-September 2025, banned malicious accounts, and alerted authorities.
Key Points
- •First documented case of a foreign government fully automating a cyberattack using AI agents, with minimal human direction required.
- •Claude Code carried out 80-90% of the operation autonomously, exploiting its agentic multi-step capabilities after jailbreaking.
- •~30 organizations targeted globally including tech firms, financial institutions, chemical manufacturers, and government agencies.
- •Contrasts with earlier Russian use of AI for malware generation, which still required step-by-step human prompting.
- •Anthropic responded by banning accounts, alerting targeted organizations, and sharing findings with authorities within 10 days.
Cited by 1 page
| Page | Type | Quality |
|---|---|---|
| Claude Code Espionage Incident (2025) | -- | 63.0 |
Cached Content Preview
HTTP 200Fetched Mar 20, 20269 KB
Manage your tracker preferences
We use cookies and similar tracking technologies to remember preferences, analyze traffic, and deliver ads. Using some kinds of trackers (like cross-site or behavioral advertising cookies) may be considered a “sale” or “sharing” of personal data under certain state laws. You can opt in or out of these trackers below.
Targeted advertising cookies and similar trackers
On
Setting this to “off” disables targeted advertising and related trackers in your current browser. To fully opt out, you must disable tracking on each browser and device you use. Clearing cookies may reset your preferences. Because we can't link your Axios subscriber account (email) to browser cookies, you may also want to update your settings in the Privacy Center to ensure your account is fully opted out. See our Privacy Policy for more on how we use personal data and your rights. Review our Privacy Policy at axios.com/legal for more on how we use personal data and your rights.
Save
[Privacy Center](https://privacy.axios.com/)
[Powered by](https://ethyca.com/)
[Skip to main content](https://www.axios.com/2025/11/13/anthropic-china-claude-code-cyberattack#main-content)
Nov 13, 2025 \- [Technology](https://www.axios.com/technology)
# Chinese hackers used Anthropic's AI agent to automate spying
- [Sam Sabin](https://www.axios.com/authors/ssabin)
- email (opens in new window)
- sms (opens in new window)
- facebook (opens in new window)
twitter (opens in new window)
linkedin (opens in new window)
bluesky (opens in new window)
[Add Axios on Google](https://google.com/preferences/source?q=axios.com)
Add Axios as your preferred source to
see more of our stories on Google.
[Add Axios on Google](https://google.com/preferences/source?q=axios.com)
Illustration: Sarah Grillo/Axios
Suspected Chinese operators used Anthropic's AI [coding tool](https://www.axios.com/2025/09/29/anthropic-claude-sonnet-coding-agent) to target about 30 global organizations — and had success in several cases, the company said Thursday.
**Why it matters:** This is the first documented case of a foreign government using [AI](https://www.axios.com/technology/automation-and-ai) to fully automate a cyber operation, Anthropic warned.
- Anthropic said the campaign relied on Claude's agentic capabilities, or the model's ability to take autonomous action across multiple steps with minimal human direction.
**The big picture:** The dam is breaking on state hackers using AI to speed up and scale digital attacks.
- Earlier this month, Google [said](https://www.axios.com/2025/11/05/goog
... (truncated, 9 KB total)Resource ID:
6d9cd9cef5ded2f9 | Stable ID: ZDYwYjMzMW