LLMMedium
Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development
- Occurred
- Apr 23, 2025
- Published
- Apr 29, 2025
- Source
- AI Incident Database
Summary
In April 2025, Anthropic published a report detailing several misuse cases involving its Claude LLM, all detected in March. These included an "influence-as-a-service" operation that orchestrated over 100 social media bots; an effort to scrape and test leaked credentials for security camera access; a recruitment fraud campaign targeting Eastern Europe; and a novice actor developing sophisticated malware. Anthropic banned the accounts involved but could not confirm downstream deployment.
Developers
- Anthropic
Deployers
- Malicious actors
- Influence-as-a-service operators
- Cybercriminals
Harmed parties
- Social media users
- People targeted by malware
- National security and intelligence stakeholders
- Job seekers in Eastern Europe
- IoT security camera owners
- Epistemic integrity
- Targets of fraudulent professional opportunities
Tags
- chatbots
- large language models
- disinformation
- misinformation
- influence operations
- content moderation failure
- social media bots
- influence as a service
- credential stuffing
- malware generation
- recruitment fraud
- job scam
- dark web scanning
- password scraping
- state-linked narratives
- novice threat actor
- adversarial use
- multi-client campaign
- Anthropic
- Claude
- image generation prompting
- real-time language sanitation
- persona scripting
- JSON automation
- Europe
- Kenya
- United Arab Emirates
- Iran
- Eastern Europe
- response
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Anthropic report details misuse of Claude LLM for malicious activities like credential stuffing and malware development.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8