posted in Technology

Anthropic AI created fake profiles and impersonated people in attempted hack

Unprompted…

In the most serious case, a Mythos agent followed the routine of a human cyber-attacker by trying to trick people into giving it access to GitHub, a large platform where technology developers store software code.

The agent was trying to insert “malicious code” into GitHub’s system.

It identified and researched the people who maintained GitHub and created a series of fake accounts based on those real people.

It sent messages and files through a file-sharing service as part of an effort to pressure and trick the people into approving its malicious code.

When challenged, “it edited its earlier activity to appear harmless and considered adopting a fresh identity to continue,” AISI said.

www.bbc.co.uk/news/articles/c1w1lvn7d9go
A phone with the orange Anthropic logo on the screen. Below is written "Claude Mythos"BBC NewsAnthropic AI created fake profiles and impersonated people in attempted hackThe UK's AI Safety Institute said recent behaviour from Anthropic and OpenAI models was malicious and unprecedented.
enPage

Replying to @⁨AnalogAllamma@lemmy.world⁩

We’re sure they’re absolutely PR stunts and bullshit.

An LLM does nothing without being prompted. An LLM only has access to the tools you give it via whatever harness you’re interacting with it through. An LLM in an actual sandbox has zero chance to hack anything, especially if it’s properly air-gapped, as any responsible person would do with technology they actually think is dangerously powerful.

If their LLMs are behaving badly, that’s because their prompts are poorly written, their harnesses are vibe-coded garbage, and their “sandboxes” aren’t real sandboxes.

Replying to @⁨urushitan@kakera.kintsugi.moe⁩

It’s to feed the algorithms and get more views. They get paid based on the number of views a video gets. The higher the algorithm promotes a video, the more views they get. Getting lots of comments on a video causes the algorithm to promote it more. It costs the spammers almost nothing to shit out a quick thirst trap video but they need to get enough views to recoup that cost which means there is a minimum number of views they need to break even. It’s not a huge number as far as these platforms go, but it’s also not nothing so anything they can do to encourage more views is mandatory for them.