Over the past eight months, our Threat Intelligence team identified and disrupted operations in which threat actors tried to use Claude for malicious activity. In this report, we share case studies from those operations and describe how malicious use of Claude has evolved since our previous threat reports in\u00a0March<\/a>,\u00a0August<\/a>, and\u00a0November<\/a>\u00a02025. In each case, we disrupted the activity, used what we learned to strengthen our safeguards, and shared intelligence with authorities and industry partners, where appropriate.<\/p>\n This report covers activity we disrupted between December 2025 and August 2026 across seven harm areas: cyber operations, influence operations, surveillance, scams and fraud, biological misuse, conventional weapons development, and distillation. Claude Haiku, Sonnet, and Opus models were used. None of the misuse cases involved the use of Claude Fable or Mythos-class models, with the exception of one illicit distillation case.<\/p>\n The cases we share here aren\u2019t typical misuse, but rather examples of the most notable and novel threat activity we\u2019ve identified to date. We\u2019re publishing this work because we believe we have a responsibility to disclose malicious misuse of our services. As models become increasingly capable, their risks will increase, unless AI developers and society\u2019s defenders act to make them safer.<\/p>\n The threat actors covered in this report include suspected state-sponsored groups, financially motivated criminals, commercial spyware vendors, state propaganda institutions, and politically motivated individuals. The cases range from a network of fake dating apps designed to defraud users to surveillance systems built to identify and monitor dissidents.<\/p>\n Sophisticated and persistent threat actors continuously test our safeguards and try to circumvent the technical measures we use to detect and prevent misuse. We\u2019ll continue to evolve our safeguards and coordinate with our partners to improve our ability to detect, disrupt, and\u00a0prevent future misuse.<\/a><\/p>\n We hope that the findings in this report will help other developers recognize similar patterns on their own platforms, give governments and civil society a clearer view of how emerging threats take shape, and strengthen collective defenses.<\/p>\n![\"Descargar](\"https:\/\/www.fie.undef.edu.ar\/ceptm\/wp-content\/uploads\/2020\/02\/icono-PDF-1-243x300.png\")
<\/a><\/p>\n<\/div>\n<\/div>\n<\/article>\n<\/div>\n<\/section>\n