--- title: The AI That Hacked 30 Companies While We Were Sleeping description: GTG-1002 let AI run an entire campaign against 30 organizations with 80-90% automation. Humans made 4-6 decisions. Our stacks cannot match that speed. image: https://www.appsecai.io/hubfs/Blog%20Posts/Blog%20image%20styles%20(Twitter%20Post)%20(39).webp --- [![Logo. Blue. Horizontal](https://www.appsecai.io/hubfs/Logo.%20Blue.%20Horizontal.svg "Logo. Blue. Horizontal")](https://www.appsecai.io) - Open submenu for Products - [Expert Fix Automation](https://www.appsecai.io/expert-fix-automation) - [Expert Triage Automation](https://www.appsecai.io/expert-triage-automation-eta) - Open submenu for By Role - [Application Security Teams](https://www.appsecai.io/application-security-teams) - [Product Security](https://www.appsecai.io/product-security) - [CISOs](https://www.appsecai.io/application-security-for-cisos) - [Vulnerability Management](https://www.appsecai.io/vulnerability-management) - [Engineering Leaders](https://www.appsecai.io/engineering-security-automation) - Open submenu for Resources - [Blog](https://www.appsecai.io/blog) - [Case Studies](https://www.appsecai.io/case-studies) - [AppSec - Complete Guide in AI Era](https://www.appsecai.io/application_security_complete_guide) - [Videos & Podcasts](https://www.appsecai.io/videos-podcasts) - [Return on Investment Calculator](https://www.appsecai.io/roi) - [Performance Metrics](https://www.appsecai.io/performance-metrics) - [AI Security Book](https://www.appsecai.io/the-ai-security-advantage-by-bruce-fram) - [Partners](https://www.appsecai.io/partners) - [Pricing](https://www.appsecai.io/pricing) - [About](https://www.appsecai.io/about) Show submenu for About - [Leadership Team](https://www.appsecai.io/about#leadership) - Open submenu for Products - [Expert Fix Automation](https://www.appsecai.io/expert-fix-automation) - [Expert Triage Automation](https://www.appsecai.io/expert-triage-automation-eta) - Open submenu for By Role - [Application Security Teams](https://www.appsecai.io/application-security-teams) - [Product Security](https://www.appsecai.io/product-security) - [CISOs](https://www.appsecai.io/application-security-for-cisos) - [Vulnerability Management](https://www.appsecai.io/vulnerability-management) - [Engineering Leaders](https://www.appsecai.io/engineering-security-automation) - Open submenu for Resources - [Blog](https://www.appsecai.io/blog) - [Case Studies](https://www.appsecai.io/case-studies) - [AppSec - Complete Guide in AI Era](https://www.appsecai.io/application_security_complete_guide) - [Videos & Podcasts](https://www.appsecai.io/videos-podcasts) - [Return on Investment Calculator](https://www.appsecai.io/roi) - [Performance Metrics](https://www.appsecai.io/performance-metrics) - [AI Security Book](https://www.appsecai.io/the-ai-security-advantage-by-bruce-fram) - [Partners](https://www.appsecai.io/partners) - [Pricing](https://www.appsecai.io/pricing) - [About](https://www.appsecai.io/about) Show submenu for About - [Leadership Team](https://www.appsecai.io/about#leadership) - [Demo Video](https://www.appsecai.io/demo) - [Schedule Demo](https://calendly.com/brucefram/30min) - [Demo Video](https://www.appsecai.io/demo) - [Schedule Demo](https://calendly.com/brucefram/30min) ![The AI That Hacked 30 Companies While We Were Sleeping](https://www.appsecai.io/hubfs/Blog%20Posts/Blog%20image%20styles%20(Twitter%20Post)%20(39).webp) # *[Analysis](https://www.appsecai.io/blog/tag/analysis)* The AI That Hacked 30 Companies While We Were Sleeping GTG-1002 let AI run an entire campaign against 30 organizations with 80-90% automation. Humans made 4-6 decisions. Our stacks cannot match that speed. ## *Share* - [mailto:?&subject=The%20AI%20That%20Hacked%2030%20Companies%20While%20We%20Were%20Sleeping&body=The%20AI%20That%20Hacked%2030%20Companies%20While%20We%20Were%20Sleeping%0A(https%3A%2F%2Fwww.appsecai.io%2Fblog%2Fthe-ai-that-hacked-30-companies-while-we-were-sleeping)](mailto:?&subject=The%20AI%20That%20Hacked%2030%20Companies%20While%20We%20Were%20Sleeping&body=The%20AI%20That%20Hacked%2030%20Companies%20While%20We%20Were%20Sleeping%0A(https%3A%2F%2Fwww.appsecai.io%2Fblog%2Fthe-ai-that-hacked-30-companies-while-we-were-sleeping)) - - - In September 2025, a Chinese state-sponsored group did something cybersecurity has never seen: they let AI run the entire operation. Not "AI-assisted hacking." Full autonomy.  The threat actor GTG-1002 manipulated Claude Code to attack roughly 30 organizations (tech giants, banks, chemical manufacturers, government agencies) with 80-90% AI automation. Humans made 4-6 strategic decisions per campaign. The AI did everything else: reconnaissance, exploit development, credential harvesting, lateral movement, data exfiltration, and attack documentation. According to [Anthropic's disclosure](https://www.anthropic.com/news/disrupting-AI-espionage), this is "the first documented case of a large-scale cyberattack executed without substantial human intervention." They succeeded in a small number of cases. That small number just changed cybersecurity forever. **How They Jailbroke an AI to Do Their Hacking** The attackers couldn't just tell Claude "hack this company." Claude's trained to refuse harmful requests. So they got creative: **1. Role-playing:** Told Claude it was an employee at a legitimate cybersecurity firm doing defensive testing **2. Task fragmentation:** Broke attacks into small, innocent-seeming tasks without revealing the full malicious context **3. Automation framework**: Built a system that fed Claude tasks in loops, chaining operations together autonomously Once jailbroken, Claude analyzed target systems and identified high-value databases in "a fraction of the time it would've taken a team of human hackers," per Anthropic. At peak operation, it made thousands of requests, often multiple per second. That's attack speed no human team can match. **What Your SAST Tool Missed** Here's the wake-up call for application security teams: Claude wrote its own exploit code by researching vulnerabilities autonomously. Your Static Application Security Testing (SAST) tool generates findings. Developers triage them. Fixes happen... eventually. That workflow assumes human-speed attacks unfolding over weeks. GTG-1002's AI completed reconnaissance, exploitation, and exfiltration autonomously, moving faster than your sprint planning. The backlog of 10,000 SAST findings you're prioritizing? An AI attacker scans it, identifies the exploitable ones, and weaponizes them before your standup ends. The gap between "finding vulnerabilities" and "fixing vulnerabilities" just became the gap between "secure" and "breached." **DAST Can't Save Us Either** Dynamic Application Security Testing (DAST) scans running applications for vulnerabilities. Great in theory. In practice, it runs on schedules and generates backlogs requiring human analysis. GTG-1002's AI operated 24/7, autonomously adapting to defenses in real-time. It didn't wait for quarterly pen tests. It didn't need human analysts to interpret results between scans. Your DAST runs Tuesday nights. Their AI runs continuously. The math ain't mathing.  **The Accuracy Question Everyone's Getting Wrong** Yes, Claude occasionally hallucinated credentials or claimed to extract secret information that was publicly available. However, 80-90% automation with occasional hallucinations still completed successful attacks. The hallucination problem didn't stop the operation. It slowed it down slightly. That's not a defensive victory - it's a preview of what's coming when attackers fine-tune their AI for fewer errors. Anthropic's report is clear: "The barriers to performing sophisticated cyberattacks have dropped substantially, and we predict that they'll continue to do so." The accuracy war isn't "hallucinating AI vs. perfect AI." It's "90% automated attacks vs. human-speed defenses." **What Anthropic Got Right** Their conclusion is the part everyone should read twice: "A fundamental change has occurred in cybersecurity. We advise security teams to experiment with applying AI for defense in areas like Security Operations Center automation, threat detection, vulnerability assessment, and incident response." Translation: AI vs. AI is the new baseline. The question isn't whether to adopt AI security - it's whether your AI is more reliable and faster than theirs. **The Board Conversation** Your CFO will ask: "Should we invest in AI security tools?" Show them this: Nation-states are using AI to execute attacks with 80-90% automation, succeeding against major tech companies and government agencies. The business case isn't "innovative technology" anymore. It's "defend against documented attack methodologies." Organizations deploying accurate AI security now gain defensive advantages. Competitors without AI-powered defenses are defending at human speed against machine-speed threats. Doesn't seem like a fair fight. **The Bottom Line** GTG-1002 proved AI can orchestrate sophisticated cyberattacks with minimal human intervention. They succeeded in multiple cases. Anthropic predicts these attacks "are likely to only grow in their effectiveness." The future isn't human vs. AI. It's AI-powered defense vs. AI-powered attacks. Integrated solutions vs. custom frameworks. Proven performance vs. hoping your team works faster than their AI. This was the first documented large-scale AI cyberattack. It won't be the last. --- **Stop finding vulnerabilities. Start fixing them at machine speed. AppSecAI's automated remediation delivers 97% accuracy for teams defending against AI-powered attacks that won't wait for your backlog. See[how we fix](https://www.appsecai.io/expert-fix-automation) what others only find** --- ## So ## **You May Also Like** #### [![We Wrote This Down in 2023. Nobody Wanted to Hear It.](https://www.appsecai.io/hubfs/Blog%20Posts/This%20weeks%20earthquake%20AI%20can%20now%20find%20and%20chain%20security%20vulnerabilities%20better%20than%20most%20human%20pen%20testers..webp) *Apr 24, 2026, 10:30:00 AM | Analysis* We Wrote This Down in 2023. Nobody Wanted to Hear It.](https://www.appsecai.io/blog/we-wrote-this-down-in-2023.-nobody-wanted-to-hear-it) #### [![We're Putting an Apollo Program Into AI—Every Single Year](https://www.appsecai.io/hubfs/Blog%20Posts/Earthrise-August2013_1000x1000-1.webp) *Dec 24, 2025, 10:30:00 AM | Analysis* We're Putting an Apollo Program Into AI—Every Single Year](https://www.appsecai.io/blog/were-putting-an-apollo-program-into-ai-every-single-year) #### [![Everyone's Panicking About Mythos. We Made Popcorn](https://www.appsecai.io/hubfs/Blog%20Posts/Grab%20some%20popcorn.webp) *Apr 18, 2026, 10:30:00 AM | Analysis* Everyone's Panicking About Mythos. We Made Popcorn](https://www.appsecai.io/blog/everyones-panicking-about-mythos.-we-made-popcorn) [See All Posts](https://www.appsecai.io/blog) [![Logo. White. Horizontal](https://www.appsecai.io/hubfs/Logo.%20White.%20Horizontal.svg "Logo. White. Horizontal")](https://www.appsecai.io/) **Automation for Application Security Teams** - Products - [Expert Fix Automation (EFA)](https://www.appsecai.io/expert-fix-automation) - [Expert Triage Automation (ETA)](https://www.appsecai.io/expert-triage-automation-eta) - [Try Now!](https://www.appsecai.io/try-now) - By Role - [Application Security Teams](https://www.appsecai.io/application-security-teams) - [Product Security](https://www.appsecai.io/product-security) - [Vulnerability Management](https://www.appsecai.io/vulnerability-management) - [CISOs](https://www.appsecai.io/application-security-for-cisos) - [Engineering Leaders](https://www.appsecai.io/engineering-security-automation) - Resources - [Blog](https://www.appsecai.io/blog) - [Case Studies](https://www.appsecai.io/case-studies) - [Videos & Podcasts](https://www.appsecai.io/videos-podcasts) - [AI Security Book](https://www.appsecai.io/the-ai-security-advantage-by-bruce-fram) - [Metrics](https://www.appsecai.io/performance-metrics) - [ROI Calculator](https://www.appsecai.io/roi) - [Pricing](https://www.appsecai.io/pricing) - Company - [About](https://www.appsecai.io/about) - [Partners](https://www.appsecai.io/partners) - [Careers](https://www.appsecai.io/careers) - [Contact Us](https://www.appsecai.io/contact) - [Privacy Policy](https://www.appsecai.io/privacy-policy) - [Terms of Service](https://www.appsecai.io/terms-of-service) - [Cookie Policy](https://www.appsecai.io/cookie-policy) --- © 2026 AppSecAI, Inc. All rights reserved. ```json { "@context" : "https://schema.org", "@id" : "https://www.appsecai.io/#org", "@type" : "Organization", "contactPoint" : [ { "@type" : "ContactPoint", "availableLanguage" : [ "en" ], "contactType" : "sales", "email" : "automation@appsecai.io" }, { "@type" : "ContactPoint", "availableLanguage" : [ "en" ], "contactType" : "security", "email" : "security@appsecai.io" }, { "@type" : "ContactPoint", "availableLanguage" : [ "en" ], "contactType" : "privacy", "email" : "privacy@appsecai.io" } ], "logo" : { "@type" : "ImageObject", "height" : 112, "url" : "https://43994771.fs1.hubspotusercontent-na2.net/hubfs/43994771/Logos/Logo.%20Blue.%20Stacked-1.png", "width" : 112 }, "name" : "AppSecAI, Inc.", "sameAs" : [ "https://www.linkedin.com/company/appsecai-inc/", "https://www.youtube.com/@AppSecAI" ], "url" : "https://www.appsecai.io/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.appsecai.io/#website", "@type" : "WebSite", "inLanguage" : "en-US", "name" : "AppSecAI", "publisher" : { "@id" : "https://www.appsecai.io/#org" }, "url" : "https://www.appsecai.io/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.appsecai.io/blog/ai-cyberattack-gtg-1002/#post", "@type" : "BlogPosting", "articleSection" : "Thought Leadership", "author" : { "@id" : "https://www.appsecai.io/#org", "@type" : "Organization" }, "dateModified" : "2026-03-06T00:00:00Z", "datePublished" : "2026-03-06T00:00:00Z", "description" : "China's GTG-1002 proved our security stacks can't keep pace with machine-speed attacks. Here's what SAST and DAST teams need to know.", "headline" : "The AI That Hacked 30 Companies While We Were Sleeping", "image" : { "@type" : "ImageObject", "height" : 900, "url" : "https://43994771.fs1.hubspotusercontent-na2.net/hubfs/43994771/Blog%20Posts/Blog%20image%20styles%20(Twitter%20Post)%20(39).webp", "width" : 1600 }, "inLanguage" : "en-US", "keywords" : "GTG-1002, AI cyberattack, application security, SAST, DAST, vulnerability remediation, AI-powered attacks, AppSec automation, machine-speed threats, Chinese state-sponsored hacking, AI security, vulnerability backlog", "mainEntityOfPage" : { "@id" : "https://www.appsecai.io/blog/ai-cyberattack-gtg-1002/#webpage", "@type" : "WebPage" }, "publisher" : { "@id" : "https://www.appsecai.io/#org" }, "url" : "https://www.appsecai.io/blog/ai-cyberattack-gtg-1002", "wordCount" : 850 } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.appsecai.io/blog/author/bruce-fram#author", "@type" : "Person", "email" : "bruce@appsecai.io", "name" : "Bruce Fram", "sameAs" : [ "https://www.linkedin.com/in/bruce-fram/", "http://www.appsecai.io" ] } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.appsecai.io/blog/the-ai-that-hacked-30-companies-while-we-were-sleeping#blogposting", "@type" : "BlogPosting", "author" : { "@id" : "https://www.appsecai.io/blog/author/bruce-fram#author" }, "commentCount" : 0, "dateModified" : "2024-10-01T12:0000+0000", "datePublished" : "2026-03-06T13:5655+0000", "headline" : "The AI That Hacked 30 Companies While We Were Sleeping", "image" : "https://www.appsecai.io/blog/the-ai-that-hacked-30-companies-while-we-were-sleeping", "inLanguage" : "en", "keywords" : [ "Analysis" ], "mainEntityOfPage" : "https://www.appsecai.io/blog/the-ai-that-hacked-30-companies-while-we-were-sleeping", "name" : "The AI That Hacked 30 Companies While We Were Sleeping", "publisher" : { "@id" : "https://www.yourdomain.com#organization" }, "url" : "https://www.appsecai.io/blog/the-ai-that-hacked-30-companies-while-we-were-sleeping", "wordCount" : 812 } ```