Anthropic Says Russian-Linked Group Used Claude to Rebuild Malware After Detection

Anthropic says a Russian-speaking espionage operator used Claude-driven workflows to monitor security detections, rebuild malware, and support phishing operations targeting more than 20 organizations. The activity, tracked as GTG-20006, targeted Ukrainian and European government, diplomatic, defense, and intelligence organizations, with additional targets in the Middle East and Asia.