{"id":130,"date":"2026-10-29T07:06:53","date_gmt":"2026-10-29T07:06:53","guid":{"rendered":"https:\/\/bugskan.com\/?p=130"},"modified":"2026-10-29T07:06:54","modified_gmt":"2026-10-29T07:06:54","slug":"anthropic-reported-claude-code-misuse-in-a-september-2025-espionage-campaign","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/anthropic-reported-claude-code-misuse-in-a-september-2025-espionage-campaign\/","title":{"rendered":"Anthropic reported Claude Code misuse in a September 2025 espionage campaign"},"content":{"rendered":"<p>Anthropic said its investigators detected a September 2025 campaign that used Claude Code and connected tools to support intrusions against roughly 30 organizations. The company reported a small number of successful compromises and attributed the actor, GTG-1002, to Chinese state sponsorship.<\/p>\n<p>The attribution and estimates of AI autonomy are Anthropic\u2019s assessments. They should not be presented as independently measured facts or as evidence that Claude\u2019s underlying infrastructure was breached.<\/p>\n<p>Anthropic said it banned associated accounts, notified affected entities where appropriate and coordinated with authorities. Defenders should examine the reported techniques and their own access controls rather than assuming an AI-assisted campaign requires an entirely different response process.<\/p>\n<p><a href=\"https:\/\/www.anthropic.com\/news\/disrupting-AI-espionage?_bhlid=9b8836c5e2ca155c2d8a3894cd74c5847cfd7aa1\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The company attributed GTG-1002 to a Chinese state-sponsored actor and reported a small number of successful intrusions.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_53301c9280ea07","bugskan_event_type":"research","bugskan_response":"unknown","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"high","bugskan_affected_scope":"Anthropic\u2019s reported investigation of GTG-1002 activity.","bugskan_recommended_next_step":"Review campaign techniques alongside identity, credential and intrusion-monitoring controls.","bugskan_who_should_check":"","bugskan_material_updated_at":"2025-11-13T00:00:00Z","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[3],"bugskan_technology":[],"class_list":["post-130","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-research-explained"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=130"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/130\/revisions"}],"predecessor-version":[{"id":349,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/130\/revisions\/349"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=130"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=130"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}