Midnight Blizzard
Midnight Blizzard (also tracked as APT29, Cozy Bear, and The Dukes) is a Russian state-sponsored hacking group widely attributed to the country's foreign intelligence service (SVR). It focuses on long-term cyber-espionage operations against governments, diplomatic missions, think tanks, and IT service providers in Europe and North America. The group has been linked to major intrusions including the 2016 breach of US Democratic Party networks and the 2020 SolarWinds supply-chain compromise. Western cybersecurity agencies and researchers consider it one of the most capable and persistent threat actors linked to the Russian government.
-
Anthropic: Russia-linked hackers used Claude Code to automate cyberattacks on Ukraine and Europe
Anthropic published a report documenting how a cyber actor tracked as GTG-20006 — linked by researchers to the Russian group Midnight Blizzard — used the company's Claude Code AI tool to automate large portions of cyberattacks against Ukrainian and European government, defense and diplomatic targets. The investigation identified more than 20 organizations hit between December 2025 and August 2026, with military drone developers and their supply chains among the key themes.