Ledger / Mar 2025
Novice actor built an evasive malware builder with Claude
Confirmed
Anthropic states it identified and banned the actor.
A low-skill actor used Claude to grow a batch-script generator into a GUI builder for payloads aimed at evading security controls and keeping persistent access.
“We identified and banned a novice actor leveraging Claude to improve their technical capabilities and develop malicious tools beyond their actual skill level.”Anthropic
Sources
- Detecting and countering malicious uses of Claude: March 2025Anthropic · 23 Apr 2025 · primary source
- Date
- Mar 2025
- Disclosed
- 23 Apr 2025
- Actor
- Unnamed novice actor (criminal), as attributed by Anthropic
- Targets
- Unspecified
- What the AI did
- Malware dev, Evasion
- Model
- Claude
- Model family
- Anthropic
- Model basis
- stated by vendor
- Autonomy
- assist
- Outcome
- Account banned; real-world deployment not confirmed.