One of the world’s largest AI companies, Anthropic, has warned that its chatbot has been ‘weaponised’ by threat actors to “to commit large-scale theft and extortion of personal data”. Anthropic’s Threat Intelligence Report details ways in which the technology is being used to carry out sophisticated cyberattacks.
Weaponized AI is making hackers faster, more aggressive, and more successful – and the threat report outlines that ransomware attacks which previously would have required years of training can now be crafted with very few technical skills.
These cyberattacks are lucrative for hackers, with AI now being used for fraudulent activity like stealing credit card information and identity theft, with attackers even using AI to analyze stolen data.
You may like
“Vibe hacking”
Defenders have long warned that AI is lowering the barriers to cybercrime, allowing low-skilled hackers to carry out complex attacks, but LLMs are now assisting criminals at every point along the attack process.
The report describes a particular threat it dubs ‘vibe-hacking’, which refers to a campaign in which Claude was used to scale and build a data extortion scheme. The name is a reference to the ‘vibe coding’ method of software development which heavily relies on AI to generate code and build applications.
Cluade’s code execution environment was used to; ‘automate reconnaissance, credential harvesting, and network penetration at scale, potentially affecting at least 17 distinct organizations in just the last month across government, healthcare, emergency services, and religious institutions.’
Anthropic’s investigations found cybercriminals targeted a range of sectors, focusing on data theft and extortion. These attacks resulted in ‘the compromise of personal records, including healthcare data, financial information, government credentials, and other sensitive information, with direct ransom demands occasionally exceeding $500,000.’