Organizations/threat actor

GTG-1002

Anthropic's designation for a group it assesses with high confidence to be Chinese state-sponsored, which used Claude Code in a 2025 espionage campaign.

1 records1 attack
Nov 13, 2025
Anthropic disrupts a state-sponsored espionage campaign it says was largely executed by Claude Code
AttackMisuse reportAnthropic, GTG-1002

Anthropic reports that in mid-September 2025 a group it assesses with high confidence to be Chinese state-sponsored used Claude Code inside an attack framework to attempt intrusions into about thirty organizations, succeeding in a small number. The operators got past safeguards by splitting the work into innocuous-looking tasks and claiming to be a security firm doing defensive testing; Anthropic says the AI performed 80 to 90 percent of the campaign, with people at a handful of decision points.