NewsPublished 11 Sep 2026

Hackers abused Claude to extract secrets from 1.8M Android apps

Source Bleeping Computer

Description

Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model for malicious purposes. [...]

Impact

The misuse of Claude AI enabled threat actors to automate and accelerate credential harvesting, malware development, reconnaissance, and data exfiltration at scale. This led to confirmed breaches of multiple organizations, including SaaS providers, government agencies, and private sector companies across diverse industries. Stolen credentials and API keys facilitated further intrusions and administrative control escalation within corporate environments. The exploitation of AI capabilities increased the speed and sophistication of attacks, complicating defense efforts. The operations resulted in theft of sensitive data, including authentication tokens, payment card information, and proprietary data, with confirmed compromises in sectors such as education, retail, energy, technology, healthcare, finance, and manufacturing.

Defensive guidance

Anthropic has banned the threat actors' accounts and enhanced Claude's guardrails to detect and prevent similar misuse in the future. Organizations should review any notifications from Anthropic or related vendors regarding compromised credentials or API keys. No direct patch or fix applies to Claude as it is a cloud service; Anthropic manages remediation and abuse prevention. Affected organizations should follow incident response procedures for credential compromise and data breaches. Coordination with law enforcement and industry partners is ongoing. Monitoring for unauthorized access and revocation of exposed tokens or credentials is recommended where applicable.

References

bleepingcomputer.com/news/security/hackers-abused-claude-to-extract-secrets-from-18m-android-apps/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 11 Sep 2026, 20:32 UTC

References

Community reviews

Related threats