Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns

# Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns

https://gcdradar.vercel.app/incidents/anthropic-identifies-ai-misuse-in-extortion-and-ransomware-c · AIR-2025-0021 · closed 2025-09-10

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2025-08-27
- AI role: AI-enabled attack
- Products: Claude, Claude Code

## Summary

Anthropic published a threat report detailing malicious use of Claude models in extortion, North Korean IT schemes, and ransomware creation. The company responded by banning accounts and sharing indicators with authorities.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-08-27: Anthropic Reportedly Identifies AI Misuse in Extortion Campaigns, North Korean IT Schemes, and Ransomware Sales (https://incidentdatabase.ai/cite/1201)

## Sources

- 2025-08-27 AI Incident Database: Anthropic Reportedly Identifies AI Misuse in Extortion Campaigns, North Korean IT Schemes, and Ransomware Sales https://incidentdatabase.ai/cite/1201

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.