Chinese Hackers Used Anthropic's AI To Automate Cyberattacks (msn.com)
- Reference: 0180065018
- News link: https://it.slashdot.org/story/25/11/13/1715248/chinese-hackers-used-anthropics-ai-to-automate-cyberattacks
- Source link: https://www.msn.com/en-us/money/other/chinese-hackers-used-anthropic-s-ai-to-automate-cyberattacks/ar-AA1QnXzN
> The effort focused on dozens of targets and involved a level of automation that Anthropic's cybersecurity investigators had not previously seen, according to Jacob Klein, the company's head of threat intelligence.
>
> Hackers have been using AI for years now to conduct individual tasks such as crafting phishing emails or scanning the internet for vulnerable systems, but in this instance 80% to 90% of the attack was automated, with humans only intervening in a handful of decision points, Klein said.
>
> The hackers conducted their attacks "literally with the click of a button, and then with minimal human interaction," Klein said. Anthropic disrupted the campaigns and blocked the hackers' accounts, but not before as many as four intrusions were successful. In one case, the hackers directed Anthropic's Claude AI tools to query internal databases and extract data independently.
[1] https://www.msn.com/en-us/money/other/chinese-hackers-used-anthropic-s-ai-to-automate-cyberattacks/ar-AA1QnXzN
News is elsewhere (Score:1)
China's state-sponsored hackers doing high volume high quality hacking : not even news.
Using AI to help in crafting phishing emails - makes perfect sense. Often the weakest part of campaigns in the past.
Using AI for scanning the internet for vulnerable systems - now *this* is surprising to me - surely tools to do this have been readily available and highly developed for a long time now? How would AI help here?
There are no profitable AND legal use-cases... (Score:2)
There are no profitable AND legal use-cases for any product being described as "AI". These tools have been industry-facing for a decade. Companies have been using them to fill their platforms with fake content and fake accounts. Fake accounts and automated attacks are their only use-case. Our entire economy is now based on the sale of tools to transnational organized crime syndicates.
Every company in this field should be facing RICO charges. Microsoft, NVidia, Google and Twitter are massive, ongoing crimi
Utilitarianism (Score:1)
There needs to be some formal rules set in place such that if you do not abide by them, you are no longer allowed to participate. China, Russia, and N. Korea have two-faced hypocritical governments that take advantage of the world allowing them to speak freely (in the digital realm), yet spend enormous energy ensuring that within their digital walls, you cannot speak freely.
"Hackers have been using AI for years now " (Score:2)
The ai capable of such things is present literally at most of 2 'years' tops
China's state-sponsored hackers (Score:2)
Are they sure the hackers are state-sponsored (and Chinese)?
msn.com won't work for me - something I have no problems with - so I can't RTFA but this appears to be too blatant for them. Russia, yes, North Korea, yes.
Re: (Score:3)
The article states: "Anthropic said it was confident, based on the digital infrastructure the hackers used as well as other clues, that the attacks were run by Chinese state-backed hackers."
Re: (Score:2)
I can actually buy the Subject: theory on the grounds of "cheap training" for "hackers" at the "script kiddy" level. Some of them may learn and graduate to higher levels of hackery, while the others will "serve the cause" by creating more noise for the "good guys" to try and filter out.
I'm not trying to scare anyone with all the scare quotes. It's just that so many words and ideas are under attack these days that I'm feeling like I should try to get in front of the mostly likely points of (mostly deliberate
Re: (Score:2)
I would like to evidence before pinning this on China. Could be Canadians with a Chinese proxy.