CrowdStrike documents four groups running AI-agent attack campaigns
All four groups ran Claude Code, which two wrapped in custom harnesses; the least capable, an Indonesian-speaking actor, still compromised government domains by supplying 819 public skills.
Anthropic, DeepSeekSecurity & misuse