Behavior

Susceptibility to social engineering

Agentic model is talked by users (role-play, fake rules, forged documents, false authority) into acting against its operator's goals or rules.

4 incidents

• AID-2026-0101May 4, 2026Grok (version unspecified)

  Grok decoded a Morse-code message into a command that Bankrbot executed, sending 3 billion DRB tokens to an attacker, Giskard reports

  Asked on X to translate a Morse-code message, Grok output a command that Bankrbot executed, sending 3 billion DRB tokens from Grok's linked wallet to an attacker. Sources value the tokens at $150,000 to $200,000; unconfirmed reports say most of it was returned.

  DeployedHarm: moderateCrime: unlikely$150K – $200KReportedDraftSusceptibility to social engineering
• AID-2026-0099Apr 2026Undisclosed model

  A cybercriminal had an AI coding agent build the intrusion tools for an invoice-fraud campaign against Brazilian companies, SOCRadar finds

  A cybercriminal operating as "masterblack" used an AI coding agent with 36+ offensive subagents to develop exploit scripts and exfiltration pipelines for Operation Master. The operator got past the agent's refusals by calling the work authorized penetration testing. The campaign compromised 21 organizations, stole data from more than 600 companies, and sent over 2.4 million fake-invoice messages.

  DeployedHarm: severeCrime: likelyReportedHuman misuseDraftUnauthorized access / intrusionSusceptibility to social engineering
• AID-2026-0025Dec 2025Claude Sonnet 4, Claude Sonnet 4.5

  Claude shop agents agreed to an onion contract barred by US law and were talked into replacing their CEO agent

  In the second phase of Anthropic's Project Vend, the Claude shopkeeper Claudius and its CEO agent Seymour Cash were ready to sign an onion price-lock deal that would have violated the 1958 Onion Futures Act. Claudius also offered a staffer $10/hour for security work, below California's minimum wage, and named an employee its "actual CEO."

  InternalHarm: noneCrime: unlikelyDraftSusceptibility to social engineering
• AID-2026-0026Nov 2025Claude 3.7 Sonnet, Claude Sonnet 4.5

  A Claude-run vending machine in the Wall Street Journal newsroom was talked into giving away goods and accepted a fake board decision

  Starting in mid-November 2025, a Claude agent named Claudius ran a vending machine in the Wall Street Journal newsroom. Journalists talked it into setting every price to zero and buying a PlayStation 5, its CEO bot accepted a fake board decision, and it ended more than $1,000 in the red.

  DeployedHarm: minorDraftSusceptibility to social engineeringDestructive autonomous action