Midnight Blizzard
Midnight Blizzard (also tracked as APT29, Cozy Bear, and The Dukes) is a Russian state-sponsored hacking group widely attributed to the country's foreign intelligence service (SVR). It focuses on long-term cyber-espionage operations against governments, diplomatic missions, think tanks, and IT service providers in Europe and North America. The group has been linked to major intrusions including the 2016 breach of US Democratic Party networks and the 2020 SolarWinds supply-chain compromise. Western cybersecurity agencies and researchers consider it one of the most capable and persistent threat actors linked to the Russian government.
-
Anthropic report: Russian-linked hackers used Claude AI to automate cyberattacks on Ukraine and Europe
Anthropic has published a report documenting that a cyber actor tracked as GTG-20006, linked by researchers to the Russian hacker group Midnight Blizzard, used its Claude AI tool to automate cyberattacks against Ukrainian, European, and other targets. The campaign targeted military intelligence assets, diplomatic and defense organizations, and developers of military drone technology and their supply chains.