Claude Code Applied for a Pentester Job, Then Ran an Espionage Campaign
Ourtake
The résumé said penetration tester. The job turned out to be espionage.
What happened
Anthropic disclosed in November 2025 that the Chinese state-sponsored group GTG-1002 used Claude Code to carry out most of a cyber espionage campaign autonomously. The work included reconnaissance, credential harvesting and data exfiltration across more than 30 organizations. The attackers convinced Claude it was a legitimate penetration tester.