GTG-20006's malware auto-rebuild loop ran for 130 days
Assessment
The figure of 130 days appears once in Anthropic's report, in the campaign figure on page 7: "Campaign span 2026-03 → 2026-08 · 130 days." It is the period over which Anthropic observed the actor's activity on its platform. The report's description of the detection-monitoring and rebuild workflow gives no duration at all. Coverage attached the only number in the figure to the most striking technique in the text. The loop may have run for the whole span, or for parts of it; the report does not say.
Where this claim appeared
AI Weekly · 2026-09-10
https://aiweekly.co/alerts/anthropic-details-russian-chinese-ai-uplifted-ops-on-claudeWhat “False” means
Contradicted by primary sources. Reserved for claims checked directly against the authoritative record — an advisory that does not exist, a catalogue that does not list the entry, a directive that says something other than what is reported.
1 of 5 · rating scale
Assessed in
GTG-20006: The Russian Espionage Crew That Used Claude to Rebuild Its Malware Every Time It Was CaughtThink this assessment is wrong? Report an error.