INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Claude Used to Abuse Android Apps

| 2026-09-11 20:55 CRITICAL MEDIUM AI-ENABLED ATTACK
JSON
Executive Summary
AI-generated
Hackers abused Claude, an AI model developed by Anthropic, to extract secrets from 1.8 million Android apps between December 2025 and August 2026. The attack is attributed to multiple threat groups linked to Russia and China, including the financially motivated ShinyHunters collective, which used a French-speaking member known as 'frkoo' to distribute credential-harvesting pipelines across ten AWS EC2 workers that scanned for secrets in the Android apps. These pipelines mass-downloaded 1.8 million distinct Android APKs from multiple app-store sources and verified findings were routed in real time to a Telegram group organized into over 100 source types, allowing 'frkoo' to obtain authentication data and breach other organizations within 34 hours of using Claude AI.
Technical Mitigations AI-generated
• Audit (ATT&CK mitigation for Phishing): Perform audits or scans of systems, permissions, insecure software, insecure configurations, etc. • Network Intrusion Prevention (ATT&CK mitigation for Phishing): Network intrusion prevention systems and systems designed to scan and remove malicious email attachments or links can be used to block activity. • Account Use Policies (ATT&CK mitigation for Social Engineering): Adds verification for helpdesk resets, approvals, and app consents commonly targeted by impersonation.
Technical Observables Login Required
Indicators of Compromise (IoCs) Protected

Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.

Sign In to View 21 IoCs Create Free Account
my•••••.com
it•••••.tel
ch•••••.eu
po•••••.cc
510af9••••••••••••••••••••••••••••••••••
937e75••••••••••••••••••••••••••••••••••
918fa5••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
be9985••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
c6f4df••••••••••••••••••••••••••
fba867••••••••••••••••••••••••••
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ShinyHuntersShinyHunters
Target & Sectors
EUROPE EUROPE APAC APAC MIDDLE_EAST MIDDLE_EAST retailretail governmentgovernment
Incident Timeline
‎December 2025
Threat actors exploited the AI company Claude to extract sensitive information from approximately 1.8 million Android apps between December 2025 and August 2026.
‎August 2026
Hackers abused the Claude AI model to extract secrets from over 1.8 million Android apps between December 2025 and August 2026.
‎2026/09/11
Threat actors, including financially motivated and state-sponsored espionage groups linked to Russia and China, abused the Claude AI model for malicious purposes.
infrastructure Android
Hackers abused Claude to extract secrets from 1.8M Android apps.
The campaigns included device-code phishing, ClickFix attacks, DNS hijacking through compromised hotel Wi-Fi providers , WhatsApp account takeovers, cloud-email theft, and Windows, Android, and iOS malware, with Claude being used throughout all attack stages.
An alleged French-speaking member of the group that used the handle ‘frkoo’ distributed a credential-harvesting pipeline across ten AWS EC2 workers that downloaded from multiple stores and then scanned for secrets in 1.8 million Android APKs.
“This pipeline mass-downloaded 1.8 million distinct Android APKs from multiple app-store sources, decompiled them, and scanned for hardcoded secrets with TruffleHog,” Anthropic explains .
infrastructure Windows
The campaigns included device-code phishing, ClickFix attacks, DNS hijacking through compromised hotel Wi-Fi providers , WhatsApp account takeovers, cloud-email theft, and Windows, Android, and iOS malware, with Claude being used throughout all attack stages.
infrastructure Ios
The campaigns included device-code phishing, ClickFix attacks, DNS hijacking through compromised hotel Wi-Fi providers , WhatsApp account takeovers, cloud-email theft, and Windows, Android, and iOS malware, with Claude being used throughout all attack stages.
organisation ClickFix
The campaigns included device-code phishing, ClickFix attacks, DNS hijacking through compromised hotel Wi-Fi providers , WhatsApp account takeovers, cloud-email theft, and Windows, Android, and iOS malware, with Claude being used throughout all attack stages.
organisation DNS
The campaigns included device-code phishing, ClickFix attacks, DNS hijacking through compromised hotel Wi-Fi providers , WhatsApp account takeovers, cloud-email theft, and Windows, Android, and iOS malware, with Claude being used throughout all attack stages.
organisation WhatsApp
The campaigns included device-code phishing, ClickFix attacks, DNS hijacking through compromised hotel Wi-Fi providers , WhatsApp account takeovers, cloud-email theft, and Windows, Android, and iOS malware, with Claude being used throughout all attack stages.
organisation AWS EC2
An alleged French-speaking member of the group that used the handle ‘frkoo’ distributed a credential-harvesting pipeline across ten AWS EC2 workers that downloaded from multiple stores and then scanned for secrets in 1.8 million Android APKs.
infrastructure 1.8 downloaded distinct Android APKs
“This pipeline mass-downloaded 1.8 million distinct Android APKs from multiple app-store sources, decompiled them, and scanned for hardcoded secrets with TruffleHog,” Anthropic explains .
organisation Claude
Russian and Chinese hackers Anthropic’s report also highlights activity attributed to the Russian espionage group “ Midnight Blizzard ,” which used Claude to automate malware development, research, infrastructure acquisition, phishing, persistence, command-and-control (C2) operations, and data exfiltration.
threat_actor ShinyHunters
" Additional harmful activity involving Claude and attributed to ShinyHunters affiliates includes breaching a technology provider and stealing 1TB of data, compromising an airline, and accessing systems of an energy company.
Over the eight-month period, Anthropic disrupted several activities linked to the ShinyHunters collective, infamous for massive data theft attacks that typically begin with social engineering and account compromise .
Suspected ShinyHunters members also stole AI API keys and used them for breaching other organizations or for reconnaissance activity.
, it took a suspected ShinyHunters threat actor about 34 hours to extract authentication data and get more than 2,100 sets of Azure AD authentication tokens linked to over 40 separate corporate Microsoft tenants.
ShinyHunters moved quickly after obtaining initial access.
data_breach 1 TB
" Additional harmful activity involving Claude and attributed to ShinyHunters affiliates includes breaching a technology provider and stealing 1TB of data, compromising an airline, and accessing systems of an energy company.
victims 50 organizations
The group's operations targeted around 50 organizations across government, education, retail, energy, technology, healthcare, finance, and manufacturing, with confirmed compromises at an education-technology company, a retailer, and a Southeast Asian government agency.
organisation Microsoft
, it took a suspected ShinyHunters threat actor about 34 hours to extract authentication data and get more than 2,100 sets of Azure AD authentication tokens linked to over 40 separate corporate Microsoft tenants.
organisation Telegram
“Verified findings were routed in real time to a Telegram group organized into over 100 source types.”
organisation GitHub
The same actor used a separate automated process to collect GitHub organization email addresses and used them to obtain GitHub Personal Access Tokens (PATs).
organisation GitHub Personal Access Tokens
The same actor used a separate automated process to collect GitHub organization email addresses and used them to obtain GitHub Personal Access Tokens (PATs).
organisation NFL
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
organisation CHANEL
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
victims 200 downstream customers
In one case, they breached a software-as-a-service provider and stole data belonging to around 200 downstream customers.
Tactical Metrics
Metrics
infrastructure
‎Android
Affected Product
Hackers abused Claude to extract secrets from 1.8M Android apps.
The campaigns included device-code phishing, ClickFix attacks, DNS hijacking through compromised hotel Wi-Fi providers , WhatsApp account takeovers, cloud-email theft, and Windows, Android, and iOS malware, with Claude being used throughout all attack stages.
An alleged French-speaking member of the group that used the handle ‘frkoo’ distributed a credential-harvesting pipeline across ten AWS EC2 workers that downloaded from multiple stores and then scanned for secrets in 1.8 million Android APKs.
“This pipeline mass-downloaded 1.8 million distinct Android APKs from multiple app-store sources, decompiled them, and scanned for hardcoded secrets with TruffleHog,” Anthropic explains .
Metrics
data_breach
1
Tb
" Additional harmful activity involving Claude and attributed to ShinyHunters affiliates includes breaching a technology provider and stealing 1TB of data, compromising an airline, and accessing systems of an energy company.
Metrics
victims
50
Organizations
The group's operations targeted around 50 organizations across government, education, retail, energy, technology, healthcare, finance, and manufacturing, with confirmed compromises at an education-technology company, a retailer, and a Southeast Asian government agency.
Metrics
infrastructure
‎Windows
Affected Product
The campaigns included device-code phishing, ClickFix attacks, DNS hijacking through compromised hotel Wi-Fi providers , WhatsApp account takeovers, cloud-email theft, and Windows, Android, and iOS malware, with Claude being used throughout all attack stages.
Metrics
infrastructure
‎Ios
Affected Product
The campaigns included device-code phishing, ClickFix attacks, DNS hijacking through compromised hotel Wi-Fi providers , WhatsApp account takeovers, cloud-email theft, and Windows, Android, and iOS malware, with Claude being used throughout all attack stages.
Metrics
infrastructure
1,800,000
Downloaded Distinct Android Apks
“This pipeline mass-downloaded 1.8 million distinct Android APKs from multiple app-store sources, decompiled them, and scanned for hardcoded secrets with TruffleHog,” Anthropic explains .
Metrics
victims
200
Downstream Customers
In one case, they breached a software-as-a-service provider and stole data belonging to around 200 downstream customers.
Intelligence Sources
BleepingComputer 2026-09-11
AlienVault OTX 2026-09-11