Connect with us

Technology

Chinese hackers turned AI tools into an automated attack machine

Published

on

Chinese hackers turned AI tools into an automated attack machine

NEWYou can now listen to Fox News articles!

Cybersecurity has been reshaped by the rapid rise of advanced artificial intelligence tools, and recent incidents show just how quickly the threat landscape is shifting.

Over the past year, we’ve seen a surge in attacks powered by AI models that can write code, scan networks and automate complex tasks. This capability has helped defenders, but it has also enabled attackers to move faster than before.

The latest example is a major cyberespionage campaign conducted by a Chinese state-linked group that used Anthropic’s Claude to carry out large parts of an attack with very little human involvement.

HACKER EXPLOITS AI CHATBOT IN CYBERCRIME SPREE

Advertisement

Sign up for my FREE CyberGuy Report 
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter 

How Chinese hackers turned Claude into an automated attack machine

In mid-September 2025, Anthropic investigators spotted unusual behavior that eventually revealed a coordinated and well-resourced campaign. The threat actor, assessed with high confidence as a Chinese state-sponsored group, had used Claude Code to target roughly 30 organizations worldwide. The list included major tech firms, financial institutions, chemical manufacturers and government bodies. A small number of those attempts resulted in successful breaches.

Claude handled most of the operation autonomously, triggering thousands of requests and generating detailed documentation of the attack for future use. (Kurt “CyberGuy” Knutsson)

How the attackers bypassed Claude’s safeguards

This was not a typical intrusion. The attackers built a framework that let Claude act as an autonomous operator. Instead of asking the model to help, they tasked it with executing most of the attack. Claude inspected systems, mapped out internal infrastructure and flagged databases worth targeting. The speed was unlike anything a human team could replicate.

To get around Claude’s safety rules, the attackers broke their plan into tiny, innocent-looking steps. They also told the model it was part of a legitimate cybersecurity team performing defensive testing. Anthropic later noted that the attackers didn’t simply hand tasks to Claude; they engineered the operation to make the model believe it was performing authorized pentesting work, splitting the attack into harmless-looking pieces and using multiple jailbreak techniques to push past its safeguards. Once inside, Claude researched vulnerabilities, wrote custom exploits, harvested credentials and expanded access. It worked through these steps with little supervision and reported back only when it needed human approval for major decisions.

Advertisement

The model also handled the data extraction. It collected sensitive information, sorted it by value and identified high-privilege accounts. It even created backdoors for future use. In the final stage, Claude generated detailed documentation of what it had done. This included stolen credentials, systems analyzed and notes that could guide future operations.

Across the entire campaign, investigators estimate that Claude performed around 80-90% of the work. Human operators stepped in only a handful of times. At its peak, the AI triggered thousands of requests, often multiple per second, a pace still far beyond what any human team could achieve. Although it occasionally hallucinated credentials or misread public data as secret, those errors underscored that fully autonomous cyberattacks still face limitations, even when an AI model handles the majority of the work.

Why this AI-powered Claude attack is a turning point for cybersecurity

This campaign shows how much the barrier to high-end cyberattacks has dropped. A group with far fewer resources could now attempt something similar by leaning on an autonomous AI agent to do the heavy lifting. Tasks that once required years of expertise can now be automated by a model that understands context, writes code and uses external tools without direct oversight.

Earlier incidents documented AI misuse, but humans were still steering every step. This case is different. The attackers needed very little involvement once the system was in motion. And while the investigation focused on usage within Claude, researchers believe similar activity is happening across other advanced models, which might include Google Gemini, OpenAI’s ChatGPT or Musk’s Grok.

This raises a difficult question. If these systems can be misused so easily, why continue building them? According to researchers, the same capabilities that make AI dangerous are also what make it essential for defense. During this incident, Anthropic’s own team used Claude to analyze the flood of logs, signals and data its investigation uncovered. That level of support will matter even more as threats grow.

Advertisement

We reached out to Anthropic for comment but did not hear back before our deadline.

Hackers used Claude to map networks, scan systems and identify high-value databases in a fraction of the time human attackers would need. (Kurt “CyberGuy” Knutsson)

FORMER GOOGLE CEO WARNS AI SYSTEMS CAN BE HACKED TO BECOME EXTREMELY DANGEROUS WEAPONS

You may not be the direct target of a state-sponsored campaign, but many of the same techniques trickle down to everyday scams, credential theft and account takeovers. Here are seven detailed steps you can take to stay safer.

1) Use strong antivirus software and keep it updated

Strong antivirus software does more than scan for known malware. It looks for suspicious patterns, blocked connections and abnormal system behavior. This is important because AI-driven attacks can generate new code quickly, which means traditional signature-based detection is no longer enough.

Advertisement

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com

2) Rely on a password manager

A good password manager helps you create long, random passwords for every service you use. This matters because AI can generate and test password variations at high speed. Using the same password across accounts can turn a single leak into a full compromise.

Next, see if your email has been exposed in past breaches. Our No. 1 password manager (see Cyberguy.com) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials. 

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com

Advertisement

3) Consider using a personal data removal service

A large part of modern cyberattacks begins with publicly available information. Attackers often gather email addresses, phone numbers, old passwords and personal details from data broker sites. AI tools make this even easier, since they can scrape and analyze huge datasets in seconds. A personal data removal service helps clear your information from these broker sites so you are harder to profile or target.

FAKE CHATGPT APPS ARE HIJACKING YOUR PHONE WITHOUT YOU KNOWING

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com

Advertisement

4) Turn on two-factor authentication wherever possible

Strong passwords alone are not enough when attackers can steal credentials through malware, phishing pages or automated scripts. Two-factor authentication adds a serious roadblock. Use app-based codes or hardware keys instead of SMS. While no method is perfect, this extra layer often stops unauthorized logins even when attackers have your password.

5) Keep your devices and apps fully updated

Attackers rely heavily on known vulnerabilities that people forget or ignore. System updates patch these flaws and close off entry points that attackers use to break in. Enable automatic updates on your phone, laptop, router and the apps you use most. If an update looks optional, treat it as important anyway, because many companies downplay security fixes in their release notes.

6) Install apps only from trusted sources

Malicious apps are one of the easiest ways attackers get inside your device. Stick to official app stores and avoid APK sites, shady download portals and random links shared on messaging apps. Even on official stores, check reviews, download counts and the developer name before installing anything. Grant the minimum permissions required and avoid apps that ask for full access for no clear reason.

7) Ignore suspicious texts, emails and pop-ups

AI tools have made phishing more convincing. Attackers can generate clean messages, imitate writing styles and craft perfect fake websites that match the real ones. Slow down when a message feels urgent or unexpected. Never click links from unknown senders, and verify requests from known contacts through a separate channel. If a pop-up claims your device is infected or your bank account is locked, close it and check directly through the official website.

By breaking tasks into small, harmless-looking steps, the threat actors tricked Claude into writing exploits, harvesting credentials and expanding access.  (Kurt “CyberGuy” Knutsson)

Advertisement

Kurt’s key takeaway

The attack carried out through Claude signals a major shift in how cyber threats will evolve. Autonomous AI agents can already perform complex tasks at speeds no human team can match, and this gap will only widen as models improve. Security teams now need to treat AI as a core part of their defensive toolkit, not a future add-on. Better threat detection, stronger safeguards and more sharing across the industry are going to be crucial. Because if attackers are already using AI at this scale, the window to prepare is shrinking fast.

Should governments push for stricter regulations on advanced AI tools? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report 
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Copyright 2025 CyberGuy.com.  All rights reserved.

Advertisement

Technology

Netflix suspension scam targets your inbox

Published

on

Netflix suspension scam targets your inbox

NEWYou can now listen to Fox News articles!

Holiday phishing attempts surge every year, and scammers know people juggle subscriptions, gifts and billing changes. That makes a fake alert feel real for a split second. Stacey P. emailed to tell us that he received one of these messages and wrote:

“I thought I should forward this message to you that I received today that was ostensibly from Netflix. Without clicking on any links, I called Netflix and they advised me that my account is in good standing. They asked me to forward this to them.”

— Stacey P.

Stacey’s experience shows how convincing these emails can appear and why taking a moment to verify can make all the difference. These Netflix suspension emails look polished at first glance. When you look closer, however, the warning signs jump out.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Advertisement

HOLIDAY DELIVERIES AND FAKE TRACKING TEXTS: HOW SCAMMERS TRACK YOU

Holiday phishing scams spike as fake Netflix suspension emails exploit seasonal billing confusion and urgency. (Zeng Hui/Xinhua via Getty Images)

Why scammers use this approach

People expect billing reminders during the holidays. When you see a familiar logo during a busy day, your guard drops for a moment. Scammers build templates that look clean, simple and trustworthy because it increases their odds of success.

Red flags inside the fake Netflix message

The Netflix scam email attempts to mimic Netflix’s branding, but several details reveal it is fraudulent.

Spelling and grammar issues

The email includes mistakes real companies would never send. It uses valldate instead of validateCommunicication instead of communication and even writes “sent to yo” with the u missing from you. Errors like these are major signs of a scam.

Advertisement

Strange tone and pressure tactics

The message claims your billing info failed and says your membership will be suspended within 48 hours unless you act. Criminals rely on urgency because it stops people from thinking clearly.

Fake login buttons

The bold red Restart Membership button aims to lure you into entering your credentials on a phishing page. Once you type your password and payment details, you hand them over to attackers.

Generic greeting

The message uses Dear User instead of your name. Netflix includes your account name in official communications.

Suspicious footer and address

The footer contains off wording about inbox preferences and a Scottsdale address not tied to Netflix. Real subscription providers use consistent company details.

FACEBOOK SETTLEMENT SCAM EMAILS TO AVOID NOW

Advertisement

A reader narrowly avoided a Netflix phishing scam by calling the company instead of clicking the email link. (Luis Boza/NurPhoto via Getty Images)

How to stay safe from the Netflix suspension scam

A few habits can protect your account even when a phishing attempt looks convincing.

1) Check your account on Netflix.com

Open Netflix on your browser or app instead of clicking any link in the email. Your account status there is always accurate.

2) Avoid entering payment details through email links

Phishing pages often copy real sites. Instead of clicking the link in the message, open your browser and type the official website address yourself. This keeps you in control and away from fake pages.

3) Use a data removal service

Scammers often pull email addresses and personal details from data broker sites. These lists fuel subscription scams that look like the Netflix alert Stacey received. A trusted data removal service can pull your information off those sites and cut down on future phishing attempts.

Advertisement

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

4) Hover over links to reveal the true URL

On a computer, hovering over a link shows where it really goes. If the address looks strange, delete the message.

5) Report the scam

Forward suspicious Netflix emails to phishing@netflix.com. This helps the fraud team block similar messages.

Advertisement

6) Strengthen your device security

Use two-factor authentication (2FA) for your email and install strong antivirus software to catch malicious pages. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

THE FAKE REFUND SCAM: WHY SCAMMERS LOVE HOLIDAY SHOPPERS

Scammers use polished branding and urgent language to trick users into giving up login and payment details. (Gabby Jones/Bloomberg via Getty Images)

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

7) Consider an identity theft protection service

If you ever enter your billing info into a fake login page, attackers can use that data for much more than streaming fraud. Identity Theft companies can monitor personal information like your Social Security number (SSN), phone number and email address, and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.

Advertisement

See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Kurt’s key takeaways

Stacey’s caution prevented him from becoming another victim of this email scam. These messages keep getting more believable, so spotting the red flags and using the steps above can save you time, money and frustration.

Have you seen a fake subscription alert recently that nearly fooled you? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Advertisement

Copyright 2025 CyberGuy.com.  All rights reserved.

Continue Reading

Technology

Samsung ‘Wide Fold’ rumored to rival Apple’s foldable next year

Published

on

Samsung ‘Wide Fold’ rumored to rival Apple’s foldable next year

Apple’s long-rumored foldable iPhone is set to arrive next year, and already faces some preemptive competition from Samsung. Korea’s ET News reports that Samsung’s upcoming “Wide Fold” is also set to launch in 2026, and will closely mirror the display size and 4:3 aspect ratio of Apple’s first foldable.

The machine-translated report says the Wide Fold is expected to feature an OLED display that measures 5.4 inches in its folded position, and 7.6 inches when unfolded. “It will be a ‘passport’ type with a 4:3 screen ratio when unfolded,” according to an unnamed industry source cited by ET News.

Last week, The Information reported that Apple’s upcoming foldable will feature a 5.3-inch display that increases to 7.7 inches when open, and will have an aspect ratio “similar to that of Apple’s largest iPads when viewed in landscape mode,” and will be “more wide than tall when unfolded.” Most iPad models sport a near 4:3 aspect ratio. This was the latest rumor that pointed to Apple’s first foldable iPhone having a wide aspect ratio in portrait mode, though Bloomberg’s Mark Gurman said in September that the device would look like two iPhone Airs stuck together.

Both Samsung and Apple’s upcoming foldables are expected to launch in Fall 2026. The 4:3 aspect ratio is better for reading e-books and documents, viewing photographs, or creative tasks like design and image editing, but would result in traditional landscape and portrait videos having ugly black bars at the top and bottom of the screen. This is something that’s already noticeable on Samsung’s squarish Z Fold 7.

Advertisement
Continue Reading

Technology

Bionic hand brings baseball star back to the field

Published

on

Bionic hand brings baseball star back to the field

NEWYou can now listen to Fox News articles!

At 18, Jamie Grohsong was living a dream many young athletes chase for years. He was a three-time all-conference shortstop, a Division I college prospect and a player who lived for the game. Then one Fourth of July night in 2023, everything changed. A firework exploded in his hand. In seconds, Jamie lost his pitching hand, his season and what felt like his entire baseball future. The path he had worked toward since childhood disappeared. For a while, Jamie accepted that reality. Baseball, the sport that shaped his identity, was over.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

AI-POWERED BAT TRACKING COULD GIVE BASEBALL PLAYERS THE EDGE

Jamie Grohsong throws a baseball using a bionic prosthetic hand after losing his pitching hand in a fireworks accident. His return shows how technology can help athletes reclaim what they love. (Kurt “CyberGuy” Knutsson)

Advertisement

When technology reopens a closed door

Two years later, Jamie stepped back onto a baseball field wearing something he never imagined using. A bionic prosthetic known as the Ability Hand.

“The fact that I can feel and sense everything to the finest details opened my mind to the possibility of everything that could actually be done,” he told CyberGuy. 

The goal was not to recreate the past. It was to find out what might still be possible.

Engineers who build advanced prosthetic hands saw Jamie’s story and reached out with a simple question. What if he did not have to give up the game entirely? That question started an extraordinary journey that blended grit, patience and cutting-edge engineering.

“When building the Ability Hand, we prioritized real-life usage,” Dr. Aadeel Akhtar, founder and CEO of PSYONIC, told CyberGuy. “While we already put the hand through its fair share of stress tests, baseball is a whole different ball game.” 

Advertisement

Baseball is definitely a brutal test for any piece of equipment. Throwing requires precise release timing. Hitting demands force, stability and follow-through. At first, nothing came easily.

Learning how to throw again

Throwing a baseball with a bionic hand is not about raw strength. It is about timing and grip. The Ability Hand uses muscle sensors that detect subtle movements in the arm. During a throw, many muscles activate at once, which can cause the hand to open too early. Early throws slipped away. Some felt right. Others did not.

Instead of forcing the hand to grip harder, the PSYONIC team adjusted the technique. Jamie learned to hold the ball lightly and let momentum release it naturally. Small grip changes made a real difference. Slowly, throws began to land. Then they became repeatable. For Jamie, each clean throw rebuilt confidence that had been missing for two years.

3D PRINTED CORNEA RESTORES SIGHT IN WORLD FIRST

A former Division I baseball prospect, Jamie Grohsong steps back onto the field with a bionic hand, redefining what is possible after life-altering injury. (Kurt “CyberGuy” Knutsson)

Advertisement

The surprise moment at Oracle Park

Just as Jamie started throwing again, another door opened. He received an invitation to throw the ceremonial first pitch at the San Francisco Giants’ Oracle Park. It was the team he grew up watching. The timeline was tight. He had barely over a week to prepare.

The pitch was not perfect. That never mattered. Standing on a Major League Baseball field with a bionic hand, Jamie proved something bigger than accuracy. He showed that the game was still part of him. Later, he said the experience taught him that life does not require perfection to be meaningful.

FULLY IMPLANTABLE BRAIN CHIP AIMS TO RESTORE REAL SPEECH

Wearing a multi-articulating bionic hand, Jamie Grohsong proves baseball is still part of his identity two years after a devastating accident. (Kurt “CyberGuy” Knutsson)

Can you actually hit with a bionic hand?

Throwing was only part of the challenge. Hitting posed an even bigger question. 

Advertisement

“Swinging a bat was a feeling I didn’t think I’d feel again,” Jamie said.

Engineers discovered that bat placement matters more with prosthetics than with natural hands. When the bionic hand serves as the bottom hand on the bat, impact spreads across the fingers. When it sits on top, stress concentrates on the thumb. Jamie bats left-handed, which placed the prosthetic in a safer position. He told CyberGuy, “I can hit with this thing for sure.”

Then came the first swings. The sensation was unfamiliar. The contact felt strange. Still, the bat met the ball. One swing turned into another. Soon, balls started flying deep into the field. Then it happened. Jamie sent one over the fence.

A world-first moment

Those swings marked what many believe to be the first documented home runs hit using a multi-articulating bionic hand. For Jamie, it was more than a technical milestone. It was emotional closure and a new beginning at the same time. He was not trying to prove that prosthetics make athletes better. He was proving that they can help people reconnect with what they love. The bionic hand did not replace his identity. It gave him a new way to express it.

SMART FABRIC MUSCLES COULD CHANGE HOW WE MOVE

Advertisement

Jamie Grohsong learns to throw and hit again with a bionic prosthetic, blending determination with cutting-edge engineering. (Kurt “CyberGuy” Knutsson)

What this story says about resilience and design

Jamie’s comeback highlights a larger truth about modern assistive technology. At its best, design focuses on real-life use rather than lab conditions. Even so, advanced prosthetics remain expensive and imperfect, and they can break under stress. Because of that, users need time, training and patience to adapt. Yet stories like this show how powerful thoughtful engineering can be when it works alongside human determination. Ultimately, this is not about superhero moments but about access, persistence and refusing to let one moment define a lifetime.

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.

 CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Advertisement

Kurt’s key takeaways 

Jamie Grohsong’s journey back to baseball is not a story about beating the odds. It is a story about redefining them. With support, innovation and relentless effort, he found a way back to the field on his own terms. Technology did not give him his old life back. It helped him build a new one that still includes the game he loves.

Has technology ever helped you reconnect with something you thought you had lost? Let us know by writing to us at Cyberguy.com.
 

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Copyright 2025 CyberGuy.com.  All rights reserved.

Advertisement
Continue Reading

Trending