Threat Groups Exploited Claude AI to Extract Secrets from Millions of Android Apps

Anthropic disclosed that multiple threat actors, including financially motivated criminals and state-sponsored groups linked to Russia and China,…

Security teams should monitor abuse patterns on AI platforms and audit whether their Android applications store secrets or credentials that could be extracted via malicious prompts. Consider implementing additional controls for sensitive data storage and review third-party API access.