Anthropic published a threat intelligence report detailing how the Russian state-linked group Midnight Blizzard used Claude AI to automate malware evasion, rapidly modifying and rebuilding tools whenever they were flagged by security products, allowing attackers to outpace defenders. The group targeted over 20 organizations across Ukraine, Europe, the Middle East, and Asia, stealing drone technology data, compromising hotel Wi-Fi networks to hijack guest traffic, and taking over WhatsApp accounts of senior Ukrainian officials. The report also highlights a broader trend of threat actors targeting AI infrastructure itself, including credential theft, fraudulent reseller schemes, and prompt injection attacks aimed at stealing API keys from AI companies.
