Hackers abused Claude to extract secrets from 1.8M Android apps
Anthropic reports ShinyHunters, Midnight Blizzard, and GTG-10007 misused Claude to automate credential theft, malware operations, and espionage against dozens of victims.
78
Product
AWS EC2
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 11, 2026
- Last mentionedSep 11, 2026
Timeline
2 articles · newest firstClaude Used to Automate Exploitation and Data Theft Across Multiple Victims
Anthropic's 154-page report details Generative Threat Groups, including APT29-linked GTG-20006 and ShinyHunters affiliates, using Claude for reconnaissance, exploitation, and data theft.
78
Appears with
- ShinyHuntersthreat actor · 2
- Midnight Blizzardthreat actor · 2
- Anthropicorganization · 2
- TruffleHogproduct · 2
- Claudeai model · 2
- Claudeproduct · 2
- GTG-10007threat actor · 2
- Anthropicvendor · 2
- Microsoftvendor · 1
- GTG-50021threat actor · 1
- GitHubvendor · 1
- Claude Codeproduct · 1
- Azure ADproduct · 1
- GTG-50029threat actor · 1
- GTG-20006threat actor · 1
- APT29threat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.