Istanbul firm BBS Bilisim sold a Claude-built Malaysia…

Filed

September 12, 2026, 02:00 UTC

Actor

BBS Bilisim Teknolojileri (Istanbul), selling the GTG-84005 platform as paid influence-as-a-service; paying customer for the Malaysia deployment not identified

Target

Malaysian social-media users and voters across all 222 parliamentary constituencies, especially along race, religion and royalty fault lines; secondary targets of an unnamed opposition politician and unnamed civil-society groups in fabricated dossiers

Source

Unidentified Source blurred: contractors, cutouts, buried disclosure

Confidence

documented Primary documents, court records, official disclosures

Techniques

Astroturfing Synthetic media Narrative laundering Manufactured consensus Card stacking Accusation in a mirror

Where

Malaysia, Turkey

Channels

Anthropic Claude sessions used to build dashboards and rewrite copy
Approximately 1,000 inauthentic X accounts with warm-up logic
malaysiapulse.com and paired YouTube channel Malaysia Pulse
AI rewrite pipeline on Malaysian news plus stripped Xinhua, CGTN, Sputnik/RIA and TV BRICS items
Fabricated intelligence dossiers
Hetzner-hosted panel infrastructure and GitHub org bbsbilisimteknolojileri-cell
Attempted pitch to Malaysia's communications regulator MCMC

Summary

Anthropic case GTG-84005, published 10 September 2026 and restated by CNA, The Edge Malaysia and MCMC on 11 September, documents an Istanbul company, BBS Bilisim Teknolojileri, that used Claude to sell a paid election-manipulation platform aimed at Malaysian users. The stack covered all 222 parliamentary constituencies with ingested census and electoral data, about one thousand fake X accounts with cookie-and-IP warm-up, a synthetic newsroom called Malaysia Pulse that rewrote local copy and stripped state labels from Xinhua, CGTN, Sputnik/RIA and TV BRICS, and fabricated intelligence dossiers against an unnamed opposition politician and civil-society groups. A dashboard request sought one million artificial views on the sitting prime minister's account; Anthropic found no link to that office. The same actor pursued a contract with MCMC and did not get it. Breakout Scale Category Two. Confidence is documented on method and vendor; the paying customer is unnamed.

Analysis

The load-bearing object this cycle is not another state factory already in this vault. It is a commercial product: an Istanbul shop sold a ready-made election stack, then pointed it at Malaysia.

Primary record is Anthropic case GTG-84005 in Detecting and Countering Misuse of AI: September 2026, published 10 September. Malaysian press and MCMC answered on 11 September. Anthropic identified and removed an account that used Claude to run a commercial election-manipulation platform aimed mainly at Malaysian users. The network was about a thousand fake X accounts, a fake news outlet, and fabricated dossiers. The shop front was a defensive cyber-intelligence and counter-disinformation toolkit. The company behind it, BBS Bilisim Teknolojileri, sold access as influence-as-a-service. The actor's own copy marketed the stack as a military-grade, AI-driven, real-time political operations ecosystem.

The Malaysia deployment ingested census and electoral data and millions of voter records across all 222 parliamentary constituencies and scored targets on race, religion and royalty. Fake accounts used warm-up logic: rotate cookies and IP addresses so the handle looks lived-in before it posts. A dashboard let an operator set how many artificial views a target should receive. Anthropic observed a request, in support of the sitting prime minister, for one million artificial views on his account. The report does not attach that request to Anwar Ibrahim's office. Malaysia Pulse, domain registered 10 May 2026 per CNA, scraped legitimate Malaysian reporting, had the model rewrite it several times, and published the result under invented bylines. The same pipeline republished TV BRICS, Xinhua, Sputnik/RIA and CGTN items after stripping the state label so the copy read as independent Malaysian reporting. Operators also generated dossiers with allegations against an opposition politician and civil-society groups that Anthropic's own check could not corroborate. Where Claude refused political-defamation language, the operator negotiated sanitized wording and kept building the same capability. The same actor pursued a contract with MCMC. Anthropic found no evidence the pursuit succeeded. On 11 September MCMC said such work is outside its mandate, that it does not engage in those arrangements, and that it is examining the report. Breakout Scale Category Two: assets on more than one platform, no measured breakout into authentic communities.

Astroturf is the costume of citizen handles. Synthetic-media is the newsroom and the dossier mill. Narrative-laundering is the rewrite that deletes Xinhua or Sputnik from the byline and the shop front that calls itself counter-disinformation. Manufactured-consensus is the view-count slider. Card-stacking is the edit that keeps a preferred race-religion-royalty cut and drops the rest. Accusation-in-a-mirror is the defensive-tooling pose: the product sold to fight manipulation is the manipulation apparatus.

This is propaganda because origin is concealed, institutional form (local news, grassroots account, intelligence file) is performed, and the design goal is to move a foreign electorate under a rented costume. It is not proof of a moved seat or a palace plot. Category Two is infrastructure, not a precinct. Do not promote a vendor into a cabinet program. Do not treat a one-million-view ticket as an official order. Do not treat MCMC's denial as proof the stack was imaginary.

A same-method test applies in reverse. A Kuala Lumpur shop that sold a thousand warmed-up accounts, a fake opposition newsroom, and invented dossiers against a minister would be this brief with the nouns swapped.

Literacy counter: if a new local newsroom, a sudden pile of citizen posts, or an 'intelligence file' about a Malaysian politician arrives without a named newsroom, a dated filing, or a disclosed client, ask who paid for the stack. Check whether state-media copy has been stripped of its label. Read the threat report and the MCMC statement before either party's victory claim. A view-count slider is not a crowd.

Tells

Vendor copy that markets a military-grade political operations ecosystem while the public site calls itself counter-disinformation
Batches of warmed-up X accounts that rotate cookies and IPs before posting on race, religion or royalty
Local newsroom with no staff page that republishes Xinhua, CGTN or Sputnik after the state label is gone
Dashboard slider for artificial views on a living official's account
Intelligence-shaped PDFs whose allegations a primary check cannot corroborate
Prompt negotiation after a model refusal on political defamation

Istanbul firm BBS Bilisim sold a Claude-built Malaysia Pulse stack of fake X accounts, rewritten news, and opposition dossiers as influence-as-a-service.

Summary

Analysis

Tells

Evidence

Related briefs