Anthropic AI-orchestrated Campaign
Campaign · ATTACK:enterprise:C0062
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:C0062",
"title": "Anthropic AI-orchestrated Campaign",
"type": "Campaign",
"source_url": "https://attack.mitre.org/campaigns/C0062",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "campaign--590cd5b0-2421-4158-84a2-db13b5db02a3",
"external_id": "C0062",
"domain": "enterprise",
"created": "2026-04-20T19:08:41.632Z",
"modified": "2026-07-31T18:47:23.588Z",
"version": "1.0",
"aliases": [
"Anthropic AI-orchestrated Campaign"
],
"tactics": [
],
"source_references": [
{
"source_name": "Anthropic Disrupting AI Espionage NOV 2025",
"url": "https://www.anthropic.com/news/disrupting-AI-espionage"
},
{
"source_name": "Anthropic AI Orchestrated Campaign NOV 2025",
"url": "https://assets.anthropic.com/m/ec212e6566a0d47/original/Disrupting-the-first-reported-AI-orchestrated-cyber-espionage-campaign.pdf"
}
]
}Explicit source assertions (27)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0365ae71-f035-48af-bed4-7609e7029804
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1699
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--20649e4e-a7b3-4252-8515-f21f262b059b
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--312f2cb6-8528-4404-857a-c8c685d7e179
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1588.007
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--33742c76-107b-455f-8462-40717e9f114b
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1136.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--39cf444d-5b03-46f8-8de7-bdc8b92407a0
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1592.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3dad2d50-94ce-4280-b3db-56286642c14b
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1590.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--426f52f4-4bd5-4370-9ef1-ae7c6926caa8
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--45264c38-14fb-4788-bc8f-97d26957e02e
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1078
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--472109ce-48af-47b2-8f64-f05598c6cff0
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--585bbf8f-b2d3-4186-8e15-f57ea1961d8c
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1595.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5a310c4b-4dab-45ad-80ef-351549c9cd65
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1087
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--764862c1-bef5-45e0-9985-3fcae340cb9f
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1587.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--82a8a34c-a439-463a-822b-9305e30b0b32
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1552.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--87066d7b-b843-44dd-9146-027ffe19fae8
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1567
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8ace7a8d-d2c3-4fde-8044-5bcb55ea8f3d
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1595.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--94192fda-44af-4990-a2fb-4fe8fd23ba0d
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1046
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--97919ca1-4aec-4fa3-b698-ae4ec7524968
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1078.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a0d76a11-92bf-4292-b411-f3a8b019beb4
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1584.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a3c7c24f-c630-4a0e-a095-8918a7092547
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1213.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a4a622e8-be15-4592-8383-8f5d72861ad5
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a681021a-b290-47cc-909a-cb9b0892eabd
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1119
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bc96f71f-560a-4d41-b85a-09c4fbc14994
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1683
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bcd1d0a0-41d2-42a8-90f5-279abc20a84f
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1592.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c5cdae9b-22b6-4f35-a688-2e9ece0652ec
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c773b719-edd5-46fc-a2b8-1bc36b2031d6
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cd18fa85-3b0c-4201-b85d-92dfaf91eb5a
Anthropic AI Orchestrated Campaign NOV 2025ATTACK:enterprise:C0062 → uses → ATTACK:enterprise:T1049
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ecdd4a9f-c89b-444f-ae27-c51c5714b60c
Anthropic AI Orchestrated Campaign NOV 2025