Anthropic: Alleged ShinyHunters Affiliates Scanned 1.8 Million Android APKs
Anthropic describes financially motivated activity by alleged ShinyHunters affiliates in which an operator downloaded, decompiled and checked 1.8 million Android applications. The target was hardcoded credentials.
GTG-50014 APK scanning is the designation for activity that Anthropic linked in its September 10, 2026 report to an alleged French-speaking affiliate of the ShinyHunters group. According to the company, the operator mass-downloaded Android applications, decompiled them and searched for hardcoded secrets, such as API keys and tokens. Anthropic says it blocked the associated accounts, took additional measures and contacted authorities, industry partners and victims.
This did not involve a compromise of Anthropic systems or a new vulnerability in Android or the Claude service. The risk concerns credentials that developers accidentally leave directly in application client binaries.
GTG-50014 APK scanning at scale
According to Anthropic, one operator ran ten workers on AWS EC2. They allegedly downloaded 1.8 million distinct Android APK files from multiple app stores. The files were then decompiled and searched with TruffleHog for potential secrets embedded in code or configuration.
Verified findings were allegedly sent in real time to Telegram groups. Anthropic also describes the parallel collection of GitHub Personal Access Tokens. This allegedly provided initial access for most of the intrusions the company confirmed in connection with the operator identified as frkoo.
The report says Claude helped accelerate reconnaissance, work with developer and authentication APIs, and the creation of tools for bulk data export and cross-tenant collection. Anthropic does not attribute the search for secrets in APKs exclusively to Claude: it describes a pipeline using TruffleHog.
Why secrets in APKs are a problem
An Android APK is a distributed client application package that may be publicly available in an app store. If a secret key, token or other credential gets into it, an attacker can search for it at scale using automated tools. The mere presence of a string does not necessarily mean it provides functional access, but a valid credential with broad permissions can open a path to a developer’s services or customers.
The case highlights the risk of embedding secrets in client applications. Anthropic also assesses that the use of AI reduced the time and expertise required to subsequently verify and exploit the findings.
For Android users, the findings do not mean they need to install a Claude update. Relevant measures are the responsibility of organizations that develop and operate applications and connected services: after leaked credentials are discovered, they may rotate credentials, remove secrets from clients, restrict token permissions and monitor for misuse.
Attribution to ShinyHunters has not yet been independently confirmed
Anthropic describes the GTG-50014 operators as suspected ShinyHunters affiliates. However, they are not publicly identified members of the group, and the connection is the company’s own assessment. The affected applications, owners of the discovered secrets, and the full number of valid or abused keys and tokens have not been publicly named.
Anthropic also cites the attackers’ claim that they could remotely regulate the charging current of home electric vehicle chargers. The company does not present this capability as independently confirmed. No independent technical confirmation of the full scope of the described intrusions and data exfiltration is publicly available so far either.
Further important information may come from technical details or indicators of compromise from Anthropic, affected providers or app store operators. The question of independent confirmation of the operators’ attribution to ShinyHunters and the scope of individual incidents also remains open.
Sources
- Anthropic — Countering misuse of AI: September 2026 – Primary source for the GTG-50014 designation, the description of the APK pipeline involving 1.8 million files, the use of TruffleHog, Claude’s role, attribution to alleged ShinyHunters affiliates and Anthropic’s actions.
- BleepingComputer — Hackers abused Claude to extract secrets from 1.8M Android apps – Secondary coverage of Anthropic’s findings about the abuse of Claude to obtain secrets from Android applications at scale.
- Associated Press — Anthropic says it blocked misuse of its AI that could have supported biological weapons – Independently confirms the publication of Anthropic’s September report on multiple cases of harmful use of Claude.
Verified and updated: September 12, 2026 15:26
