Anthropic's new report alleges that these attacks have escalated in recent months, targeting Claude's valuable capabilities such as agentic functions, tool use, coding, data analysis, and logical reasoning. The company observed nearly 200 million exchanges linked to five separate campaigns. The largest effort, attributed to Alibaba, involved 151 million exchanges between May and July 2026, peaking at nearly 3 million daily, aimed at training its Qwen models. Another campaign from Moonshot AI, maker of Kimi, appeared to route requests directly from the Chinese military, including one asking Claude to assess surveillance footage for abnormal behavior.