# Anthropic says Claude was abused to scan 1.8 million Android apps for secrets

_Friday, September 11, 2026 at 4:19 PM EDT · AI, Security · Latest · Tier 2 — Notable_

![Anthropic says Claude was abused to scan 1.8 million Android apps for secrets — Primary](https://www.bleepstatic.com/content/hl-images/2026/09/11/robothacker.jpg)

Anthropic says a French-speaking actor using the handle 'frkoo' and linked to the ShinyHunters collective ran a credential-harvesting pipeline across ten AWS EC2 workers that mass-downloaded 1.8 million distinct Android APKs, decompiled them and scanned for hardcoded secrets with TruffleHog, routing verified findings to a Telegram group.

Anthropic says the same actor collected GitHub organization email addresses to obtain personal access tokens, and that a suspected ShinyHunters member extracted more than 2,100 Azure AD authentication tokens across over 40 corporate Microsoft tenants in about 34 hours, with AI agents performing nearly all the work.

Anthropic says it disrupted the activity and banned the accounts.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-abused-claude-to-extract-secrets-from-18m-android-apps/)

---
Canonical: https://techandbusiness.org/newswire/I7fJBGVCbWgIudxNcNkcqO
Retrieved: 2026-09-12T02:48:24.660Z
Publisher: Tech & Business (techandbusiness.org)