Skip to Content
logologo
AI Incident Database
Donate
Discover
Submit
  • Welcome to the AIID
  • Table View
  • List view
  • Entities
  • Taxonomies
  • Spatial View
  • Blog
  • AI News Digest
  • Random Incident
  • Sign Up
Discover
Submit
  • Welcome to the AIID
  • Table View
  • List view
  • Entities
  • Taxonomies
  • Spatial View
  • Blog
  • AI News Digest
  • Random Incident
  • Sign Up
Entities

Malicious actors

Incidents involved as both Developer and Deployer

Incident 13684 Report
Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

2026-02-01

Bitdefender researchers reported abuse in OpenClaw's third-party 'skills' ecosystem. In a Feb. 2026 sample, about 17% of skills were reportedly assessed as malicious, with many seemingly cloned under slight name changes. Posing as utilities, some skills were reportedly found to run obfuscated commands, fetch remote payloads, and in some cases deliver AMOS Stealer on macOS. Other skills were reportedly observed searching for private keys or API tokens and exfiltrating them.

More

Incidents involved as Deployer

Incident 10545 Report
Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

2025-04-23

In April 2025, Anthropic published a report detailing several misuse cases involving its Claude LLM, all detected in March. These included an "influence-as-a-service" operation that orchestrated over 100 social media bots; an effort to scrape and test leaked credentials for security camera access; a recruitment fraud campaign targeting Eastern Europe; and a novice actor developing sophisticated malware. Anthropic banned the accounts involved but could not confirm downstream deployment.

More

Incident 16253 Report
Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

2026-04-28

French investigators alleged that Tunisian national Dhafer Mellala used ChatGPT to research the construction and destructive effects of explosive devices while planning a jihadist-inspired attack in Paris. His communications reportedly discussed placing explosives at the Louvre and attacking members of the Jewish community in the 16th arrondissement. He denied planning an attack, saying his activity reflected curiosity.

More

Incident 13211 Report
Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

2025-11-27

Actor Shilpa Shetty reportedly filed a petition before the Bombay High Court in Mumbai in November 2025 over alleged unauthorized use of her identity in AI-generated deepfakes and manipulated media. In response, the court issued interim orders directing the removal of such content and restraining further dissemination. Shetty argues the material infringes her privacy and personality rights and sought measures to halt and remove misleading, nonconsensual depictions.

More

Related Entities
Other entities that are related to the same incident. For example, if the developer of an incident is this entity but the deployer is another entity, they are marked as related entities.
 

Entity

Influence-as-a-service operators

Incidents involved as Deployer
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

Cybercriminals

Incidents involved as Deployer
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

Anthropic

Incidents involved as Developer
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

Social media users

Incidents Harmed By
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

People targeted by malware

Incidents Harmed By
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

National security and intelligence stakeholders

Incidents Harmed By
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

Job seekers in Eastern Europe

Incidents Harmed By
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

IoT security camera owners

Incidents Harmed By
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

Epistemic integrity

Incidents Harmed By
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Targets of fraudulent professional opportunities

Incidents Harmed By
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

LLM-enhanced malware toolkits

Incidents implicated systems
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

Claude AI models

Incidents implicated systems
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

Claude

Incidents implicated systems
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

AI-generated social media bots

Incidents implicated systems
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

More
Entity

Large language models

Incidents implicated systems
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

Chatbots

Incidents implicated systems
  • Incident 1054
    5 Reports

    Anthropic Report Details Claude Misuse for Influence Operations, Credential Stuffing, Recruitment Fraud, and Malware Development

  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

Scammers impersonating Shilpa Shetty

Incidents involved as Deployer
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Scammers

Incidents involved as Deployer
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Unknown content creators

Incidents involved as Deployer
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Synthetic audio generation technology developers

Incidents involved as Developer
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Generative AI developers

Incidents involved as Developer
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Deepfake technology developers

Incidents involved as Developer
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Image generation technology developers

Incidents involved as Developer
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Shilpa Shetty

Incidents Harmed By
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

General public of India

Incidents Harmed By
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

General public

Incidents Harmed By
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Fans of Shilpa Shetty

Incidents Harmed By
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Unknown generative AI systems

Incidents implicated systems
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Synthetic audio generation technology

Incidents implicated systems
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Image generation technology

Incidents implicated systems
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Deepfake technology

Incidents implicated systems
  • Incident 1321
    1 Report

    Shilpa Shetty Alleges AI-Enabled Impersonation and Misuse of Likeness in Mumbai High Court Filing

More
Entity

Unknown threat actors distributing malicious OpenClaw skills

Incidents involved as Deployer
  • Incident 1368
    4 Reports

    Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

More
Entity

Unknown threat actors

Incidents involved as Deployer
  • Incident 1368
    4 Reports

    Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

More
Entity

OpenClaw

Incidents involved as Developer
  • Incident 1368
    4 Reports

    Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

Incidents implicated systems
  • Incident 1368
    4 Reports

    Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

More
Entity

Organizations using OpenClaw

Incidents Harmed By
  • Incident 1368
    4 Reports

    Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

More
Entity

OpenClaw users

Incidents Harmed By
  • Incident 1368
    4 Reports

    Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

More
Entity

Privacy

Incidents Harmed By
  • Incident 1368
    4 Reports

    Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

More
Entity

OpenClaw skills ecosystem

Incidents implicated systems
  • Incident 1368
    4 Reports

    Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

More
Entity

ClawHub

Incidents implicated systems
  • Incident 1368
    4 Reports

    Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

More
Entity

Terrorism suspects

Incidents involved as Deployer
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

Dhafer Mellala

Incidents involved as Deployer
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

OpenAI

Incidents involved as Developer
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

Large language model developers

Incidents involved as Developer
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

Chatbot developers

Incidents involved as Developer
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

Musée du Louvre visitors and staff

Incidents Harmed By
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

Musée du Louvre

Incidents Harmed By
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

Jewish people

Incidents Harmed By
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

Jewish community of France

Incidents Harmed By
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

General public of France

Incidents Harmed By
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More
Entity

ChatGPT

Incidents implicated systems
  • Incident 1625
    3 Reports

    Tunisian Man Allegedly Used ChatGPT to Research Bomb-Making During Paris Terror Plot Targeting Louvre and Jewish Community

More

Research

  • Defining an “AI Incident”
  • Defining an “AI Incident Response”
  • Database Roadmap
  • Related Work
  • Download Complete Database

Project and Community

  • About
  • Contact and Follow
  • Apps and Summaries
  • Editor’s Guide

Incidents

  • All Incidents in List Form
  • Flagged Incidents
  • Submission Queue
  • Classifications View
  • Taxonomies

2026 - AI Incident Database

  • Terms of use
  • Privacy Policy
  • dd3f754