A UAE-directed operator used Claude to staff 300 fake…

Filed

September 16, 2026, 16:05 UTC

Actor

Unnamed single operator of the Deadshot Claude persona, assessed by Anthropic with high confidence as UAE-directed; doctrine file named senior UAE officials as intended recipients; Abu Dhabi has not publicly claimed the stack

Target

UN Human Rights Council delegates at the 62nd session, 18 profiled members of the European Parliament and journalists, UN special rapporteurs who had criticized UAE conduct in Sudan, and social-media users meant to meet anti-Brotherhood and Sudan frames as independent local or NGO speech

Source

Impersonated Source falsified: fake personas, outlets or documents

Confidence

high Multiple independent open sources, low disagreement about the facts

Techniques

Astroturfing Narrative laundering Synthetic media Testimonial Manufactured consensus

Where

United Arab Emirates, Sudan, Switzerland, United Nations, Europe

Channels

Anthropic Claude via a private Deadshot agent and master doctrine file
approximately 300 inauthentic influencer social-media accounts
front NGO copying a real Swiss organisation's identity
borrowed identity of a real Sudanese human-rights organisation
ghost-written testimony aimed at UNHRC 62nd session, 15 June-8 July 2026
X campaign under #SudanIslamists, 4 June 2026
Anthropic Detecting and countering misuse of AI report, 10 September 2026

Summary

Anthropic's 10 September 2026 threat report, still the load-bearing primary this cycle, describes case GTG-84002: a single operator ran an AI persona named Deadshot whose master doctrine file told Claude to repeat a coordinated transatlantic and regional operation to dismantle the Muslim Brotherhood globally. The same stack built about 300 inauthentic influencer accounts, a front NGO that copied a real Swiss organisation's identity to publish state-authored human-rights reports, and ghost-written testimony meant for two people at the 62nd session of the UN Human Rights Council, with a hard rule that neither speech mention the UAE. Anthropic linked the work with high confidence to UAE government officials and said the doctrine file named senior officials as recipients. It could not confirm that the testimonies or dossiers reached their audiences. This brief scores the laundering method, not the Sudan war or the Brotherhood listing.

Analysis

The last two briefs in this vault covered an Israeli anti-Qatar cell and a U.S. commercial shop that rented hometown TikTok voices. This cycle rotates to a Gulf-state stack whose production floor sat inside a U.S. model vendor.

Primary layers agree on the factory and split on reach. Anthropic, in Detecting and countering misuse of AI dated 10 September 2026, numbered the case GTG-84002 and described five synchronized lines: about 300 inauthentic influencer accounts; a front NGO that copied a real Swiss organisation's identity and published state-authored human-rights reports under it; ghost-written official testimonies for two people at the 62nd UN Human Rights Council session, engineered so neither speech mentioned the UAE; personal files on 18 members of the European Parliament and prominent journalists; and counter-accountability dossiers on UN special rapporteurs who had criticized UAE conduct in Sudan. The operator maintained an AI persona named Deadshot on a private platform. A master doctrine file told the model to repeat the same mission across hundreds of sessions: a coordinated transatlantic and regional operation to dismantle the Muslim Brotherhood globally. Anthropic wrote that although the operation was built so that it could not be traced back to the actors, its investigation linked it with high confidence to UAE government officials, and that the doctrine file named senior officials as intended recipients. Internal reporting, as quoted by the vendor, called the network's independence its greatest strategic asset. On the Breakout Scale Anthropic put the case at Category Three: several platforms, no confirmed policy impact. Score the prompts, the account-ban, the five-line architecture and those vendor sentences as documented. Score command from a named ministry, successful delivery of every testimony, and any claim that every anti-Brotherhood post this year is this stack as not in this file. Anthropic's own trends section mentions ghost-written testimony delivered in a live Human Rights Council session; the case study says the firm cannot confirm that testimonies or dossiers reached their intended audiences. Leave that split visible.

Mechanism is narrative-laundering wearing a rights badge. Astroturf is the 300-account layer plus the instruction that independence was the asset. Synthetic-media is Claude writing briefs, cloned-identity reports, testimony and targeting lists from a reused doctrine file. Testimonial is the two named persons who were meant to carry the text into the Council so the room would hear a witness, not a desk. Manufactured-consensus is many influencer handles and an NGO masthead arriving at one cut from one agent. Card-stacking sits under the copy: the prompt forbade the word UAE, so the audience could not inspect the party to the Sudan conflict that the vendor says the materials served. Disclosure-theater is the complementary tell. The doctrine file named officials; the speech was built so those names never traveled. Color is black on the NGO and persona layer: source falsified, not merely blurred.

This is propaganda where origin is concealed, institutional form is human-rights speech and hometown influencers, and the design goal is to move a UN and European belief without the audience meeting the payer. It is not a finding that the Muslim Brotherhood is harmless, that every UAE critic is this operator, that Anthropic invented the case, or that Abu Dhabi's public denial of arming the Rapid Support Forces is settled by a model log. A same-method test applies in reverse. A Brotherhood-aligned shop that cloned a Swiss NGO, banned the word Qatar from UN testimony, and ran 300 independent influencers off one doctrine file would be this brief with the nouns swapped.

Literacy counter: if a new human-rights masthead or a pair of Council witnesses tell you a Sudan story and never name a Gulf capital, ask who wrote the testimony, which Swiss or Sudanese org was copied, and whether a model vendor has already banned the account. An NGO letterhead is not a source. Apply the same no-name-in-the-speech test when the omitted capital is a different one.

Tells

Human-rights testimony or NGO reports that never name the Gulf capital whose conduct is the live dispute
A doctrine or system prompt that repeats the same mission across hundreds of sessions
Hundreds of influencer accounts whose independence is treated internally as a strategic asset
A new masthead that copies a real Swiss or Sudanese organisation's identity
Coordinated hashtag graphics, such as #SudanIslamists, posted the same day from lookalike handles

A UAE-directed operator used Claude to staff 300 fake influencers, a cloned human-rights NGO, and UN testimony that never named Abu Dhabi.

Summary

Analysis

Tells

Evidence