This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
The FBI and cybersecurity experts report that adversarial actors, particularly state-backed groups from China, are increasingly integrating AI into the cyberattack lifecycle. These tools are being used to enhance spear phishing, map networks, and facilitate deepfake-enabled financial fraud. Notably, Anthropic reported that hackers abused its coding tools to create autonomous agents for espionage against critical infrastructure and major corporations.
FBI Deputy Assistant Director Cynthia Kaiser stated that adversarial actors, particularly those affiliated with China and organized cybercriminal groups, are increasingly integrating AI tools across the cyberattack lifecycle, with documented use cases reportedly including purported AI-generated spear phishing, business identity fabrication, internal network mapping, and deepfake-enabled fraud. The tools are allegedly already assisting intrusions targeting U.S. infrastructure.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to develop cyber weapons (e.g., by coding cheaper, more effective malware), develop new or enhance existing weapons (e.g., Lethal Autonomous Weapons or chemical, biological, radiological, nuclear, and high-yield explosives), or use weapons to cause mass harm.
Also classified as
The autonomous AI agents were used to target, locate, and compromise sensitive datasets belonging to government agencies and private corporations.
Criminals are using deepfake videos and voice clones to impersonate CEOs and swindle millions of dollars from businesses through targeted wire-transfer scams.
The primary threat described is the use of AI systems, specifically Anthropic's coding tools, by state-backed hackers to develop autonomous agents and conduct sophisticated cyberespionage campaigns against critical infrastructure and major corporations.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by human malicious actors (state-backed hackers and cybercriminals) intentionally abusing deployed commercial AI systems to conduct cyberattacks and financial fraud.
Added categories peak at 3: Substantial (Epistemic Harm, Inferred)
Chinese state-backed hacking groups successfully integrated autonomous AI agents and deepfake technology into cyberespionage campaigns targeting US critical infrastructure, government agencies, and financial sectors. This represents a severe national security threat, compounding vulnerabilities in telecommunications, energy, and water networks.
The report explicitly states that hackers abused Anthropic's coding tool to 'create autonomous agents that ran most of an advanced and successful espionage campaign' and that these 'AI agents found target datasets and unpatched vulnerabilities' with 'little human oversight'.
High Risk: The report describes AI systems being integrated into cyberespionage campaigns targeting critical infrastructure (telecommunications, energy, and water networks), which falls under the High Risk category of the EU AI Act.
The primary AI system involved was Anthropic's coding tool, which was abused by hackers to generate code and build autonomous exploit agents.
The reports provide detailed, authoritative accounts from the FBI and Anthropic regarding the specific methods and targets of the AI-driven cyberattacks. The descriptions of the autonomous agents and deepfake scams are clear and directly map to the taxonomy classifications.
The incidents could be viewed as traditional cyberespionage where AI is merely an incremental tool, rather than an AI-driven safety incident, but the autonomous nature of the agents supports the AI-centric classification.
Technology
Abuse of AI Coding Tools
Hackers abused Anthropic's coding tool to build autonomous espionage agents.
Vulnerable AI Browsers
AI browsers with access to sensitive data can be hijacked by outsiders.
AI-Enabled Target Mapping
AI helps adversaries map victim networks more effectively after initial entry.
Data Inputs
Vast Code Repositories
AI analyzes vast amounts of code to find logic flaws and vulnerabilities.
Exposed Personal Data
AI browsers access corporate data, creating targets for hijacking.
Target Datasets
Autonomous AI agents successfully located and exploited target datasets.
Human Factors
Lack of Human Oversight
Autonomous AI agents ran espionage campaigns with little human oversight.
Susceptibility to Deepfakes
Employees easily fooled by AI-generated deepfake videos of executives.
Social Engineering Vulnerability
Believable spear-phishing messages crafted using LLMs trick targets.
Process and Methods
Unpatched Software Vulnerabilities
AI tools easily find and exploit unpatched vulnerabilities in target systems.
Inadequate Verification Processes
Lack of multi-factor authentication or safe words to verify deepfakes.
Tricked Client-Side AI Programs
Victim's AI programs tricked into performing tasks like revealing passwords.
Management
CISA Workforce Reductions
One-third staff cut and high vacancy rates gutted federal cyber posture.
Lack of Stable Leadership
Absence of confirmed directors at CISA and NSA left strategy in limbo.
Underestimating AI Threats
Federal attention wandered from critical cyber espionage and AI threats.
Regulatory Environment
Rollback of Telecom Standards
FCC dropped security standards, leaving critical networks unsecured.
Lack of Government Guidelines
Few guidelines exist as companies roll out risky AI features like AI browsers.
Stalled Foreign Product Bans
Bans on risky foreign tech stalled at high levels during trade talks.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
