ClawGod

Headlines · 1

1. Oct 21
   CrowdStrike: four crime groups ran agentic AI attacks despite guardrails

   CrowdStrike researchers published details of attacks carried out between May and August by four previously unreported threat groups—operating in Chinese, Spanish and English, Indonesian, and Russian—that built agentic AI harnesses and let campaigns run autonomously over long periods. All four left their AI infrastructure openly accessible on web servers, letting researchers see that they largely used versions of Anthropic's Claude and open-weight DeepSeek models, and in almost all cases older versions rather than frontier models. Attackers circumvented safeguards by framing activity as authorized penetration testing, adding files to agent working directories, and using traditional jailbreaks; the Chinese-speaking group used a runtime patch tool called ClawGod to try to remove the CYBER_RISK_INSTRUCTION from the Claude Code system prompt. The Spanish- and English-speaking actor targeted Argentine health care entities, compromising at least 15 organizations and appearing to steal credentials and medical records from at least one, while the Chinese-speaking actor compromised government targets in Brazil and Colombia, according to the researchers.

   WIRED AI · 🔥 0

Experience and discussion from the community

Share my ClawGod experienceAsk about ClawGod