Ledger / Mar 2025
Actor used Claude to build scrapers for leaked IoT camera credentials
Confirmed
Anthropic investigated and banned the account but states deployment was unconfirmed.
The actor used Claude to rewrite scraping tooling and process leaked usernames and passwords tied to security cameras, aiming to gain forced access to them.
“An actor leveraged Claude to enhance systems for identifying and processing exposed usernames and passwords associated with security cameras, while simultaneously collecting information on internet-facing targets to test these credentials against.”Anthropic
Sources
- Detecting and countering malicious uses of Claude: March 2025Anthropic · 23 Apr 2025 · primary source
- Date
- Mar 2025
- Disclosed
- 23 Apr 2025
- Actor
- Unnamed sophisticated actor (unknown), as attributed by Anthropic
- Targets
- Internet-facing security cameras
- What the AI did
- Recon, Malware dev, Ops automation
- Model
- Claude
- Model family
- Anthropic
- Model basis
- stated by vendor
- Autonomy
- assist
- Outcome
- Account banned; Anthropic could not confirm successful deployment.