“[Anthropic] A hacker used Claude Code to automate ransomware” by bohaska

Anthropic post title: Detecting and countering misuse of AI: August 2025

Read the full report here. Below lines are from the Anthropic post, and have not been edited. Accompanying images are available at the original link.

We find that threat actors have adapted their operations to exploit AI's most advanced capabilities. Specifically, our report shows:

• Agentic AI has been weaponized. AI models are now being used to perform sophisticated cyberattacks, not just advise on how to carry them out.
• AI has lowered the barriers to sophisticated cybercrime. Criminals with few technical skills are using AI to conduct complex operations, such as developing ransomware, that would previously have required years of training.
• Cybercriminals and fraudsters have embedded AI throughout all stages of their operations. This includes profiling victims, analyzing stolen data, stealing credit card information, and creating false identities allowing fraud operations to expand their reach to more potential [...]

---

Outline:

(01:25) 'Vibe hacking': how cybercriminals used Claude Code to scale a data extortion operation

(03:31) Remote worker fraud: how North Korean IT workers are scaling fraudulent employment with AI

(05:08) No-code malware: selling AI-generated ransomware-as-a-service

(06:10) Next steps

(07:03) Further reading

---

First published:

August 27th, 2025

Source:

https://www.lesswrong.com/posts/9CPNkch7rJFb5eQBG/anthropic-a-hacker-used-claude-code-to-automate-ransomware

---

Narrated by TYPE III AUDIO.