LLMHigh
Anthropic Reportedly Identifies AI Misuse in Extortion Campaigns, North Korean IT Schemes, and Ransomware Sales
- Occurred
- Aug 27, 2025
- Published
- Aug 29, 2025
- Source
- AI Incident Database
Summary
In August 2025, Anthropic published a threat intelligence report detailing multiple misuse cases of its Claude models. Documented abuses included a large-scale extortion campaign using Claude Code against at least 17 organizations, fraudulent remote employment schemes linked to North Korean operatives, and the development and sale of AI-generated ransomware. Anthropic banned the accounts, implemented new safeguards, and shared indicators with authorities.
Developers
- Anthropic
Deployers
- Ransomware-as-a-service actors
- North Korean IT operatives
- Government of North Korea
- Cybercriminals
Harmed parties
- Religious institutions
- National security and intelligence stakeholders
- Healthcare organizations
- Government agencies
- General public
- Fortune 500 technology companies
- Epistemic integrity
- Emergency services
- Consumers targeted by ransomware
Tags
- response
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Anthropic's Claude models were misused for extortion, fraud, and ransomware, constituting significant AI safety incidents.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8