Anthropic Warns of AI-Driven Hacking Campaign Linked to China: A Disturbing Development in Cyber Security
A team of researchers has uncovered a disturbing development in the world of cyber security: the use of artificial intelligence to direct a hacking campaign in a largely automated fashion. The AI company Anthropic said this week that it disrupted a cyber operation linked to the Chinese government, which involved the use of an AI system to direct hacking campaigns. This is the first reported use of AI to automate portions of cyberattacks, and it could greatly expand the reach of AI-equipped hackers.
The operation targeted about 30 individuals who worked at tech companies, financial institutions, chemical companies, and government agencies. While the scope of the operation was modest, it is the degree to which AI was able to automate some of the work that is concerning. The researchers wrote in their report, 'While we predicted these capabilities would continue to evolve, what has stood out to us is how quickly they have done so at scale.'
The hackers only succeeded in a small number of cases, but the potential for AI-driven cyberattacks is concerning. As Microsoft warned earlier this year, foreign adversaries are increasingly embracing AI to make their cyber campaigns more efficient and less labor-intensive. This could lead to more effective and widespread cyberattacks, as AI systems can automate and improve hacking efforts, spread inflammatory disinformation, and penetrate sensitive systems.
Anthropic, the maker of the generative AI chatbot Claude, is one of many tech companies pitching AI 'agents' that go beyond a chatbot's capability to access computer tools and take actions on a person's behalf. While agents are valuable for everyday work and productivity, they can also be weaponized by hacking groups working for foreign adversaries. The researchers concluded, 'These attacks are likely to only grow in their effectiveness.'
A spokesperson for China's embassy in Washington did not immediately return a message seeking comment on the report.
