AI News · Edition 43 ·
Cheaper attackers, packaged AI, and a truce nobody can verify
State-linked groups used Claude in cyber operations. For a school or clinic the lesson is not espionage — it is that convincing fraud just got cheaper.
The one that matters
Anthropic says Russia- and China-linked groups used Claude in cyber operations
What happened, in plain words
Anthropic, the company behind the Claude assistant, said it found groups tied to Russia and China using its models as part of cyber operations. Related reporting on the same disclosures points to an Iran-linked group and a Yemen-based cell using the tools in weapons- and threat-related work. Beyond that, the published detail is thin: no named victims, no clear account of which parts of an attack the models actually did. This is a company reporting misuse it detected in its own service. It is not an independent audit, and nobody should read it as one.
What it actually means for you
Almost none of our readers are of interest to a state intelligence group. The part that reaches you is the cost curve underneath the story. If a well-resourced group finds these tools useful for the dull middle of an operation — writing convincing messages, sorting stolen data, adapting a script — then ordinary criminals, the ones who actually go after schools, clinics and factories, get the same discount. That transfer downward is the thing that matters here.
What it looks like on the ground is not exotic. A 600-student school receives a fee notice that looks exactly like its own, sent two days before the term deadline, with the bank account changed. A 30-bed clinic gets a mail that appears to come from its diagnostics vendor, opened by a receptionist who has access to the records system. A workshop with 40 staff receives a supplier invoice in the right format, with the right logo and the right GST line, and one digit different in the account number. The exposure is roughly one payment run or one term of fee collection — a few lakh rupees, or a few thousand dollars, gone in an afternoon.
One practical thing has genuinely changed: bad grammar is finished as a warning sign. Fluent English, Hindi, Tamil or French now costs nothing to produce at volume. If your staff were trained to spot clumsy wording, they were trained on a signal that no longer exists.
What it does not mean, and who is overstating it
Nothing in this reporting describes a new kind of attack. The work described is faster, not novel, and the entry points are the same ones that have worked for a decade: a password reused across sites, an email account without two-factor, a payment approved on trust. It also does not mean that your staff using Claude or ChatGPT to draft letters is the risk being described. That is a data-handling question, and a separate one.
Expect this headline to be quoted at you within the month. Security resellers will attach national-security language to products that would not have stopped any of the scenarios above, and some will imply that only an AI-powered defence can meet an AI-powered attacker. Ask one plain question: which of the five steps below does your product replace? Usually the honest answer is none of them.
What a sensible owner should do this month
- Make a callback rule and write it down. Any change to a supplier or vendor bank account is verified by phone, on a number already in your records, never a number in the message. This single rule stops most of what is described above, and it costs nothing.
- Turn on two-factor authentication for every person who can approve a payment, send fee notices or open patient and student records. It is included in Google Workspace and Microsoft 365 at no extra cost and takes an afternoon for a staff of 40.
- Restore one backup this week. Not check that backups are running — actually restore a file and open it. Most owners find the gap only when finding it is expensive.
- Spend 20 minutes with staff on the current tell: urgency, plus a change in payment details, plus a reason you cannot phone back. Say plainly that well-written mail is no longer evidence of legitimacy.
- Write one page on what may be pasted into any AI tool — no patient names, no student records, no salary data, no bank details. You need this document anyway, and it takes an hour.
Total cost: about a day of somebody's time, and no new software. If a vendor quotes you for anything more this month on the strength of this news, ask them to explain in writing which risk the purchase removes.
Also worth knowing
How this briefing is put together
Every morning we read the day’s AI announcements and reporting from the companies themselves and from the technology press, then pick the handful that actually change something for a working business. The analysis is ours and it is written for owners and managers, not engineers. Every story links to its original source — read them, and disagree with us where we’ve got it wrong.