ShinyHunters Supply-Chain Attacks Hit 200 Organizations, Fake Claude Resellers Steal Credentials

ShinyHunters-affiliated hackers scanned 1.8 million Android apps for hardcoded API keys and used stolen Claude access to remotely control EV chargers across some 200 organizations, while fake Claude resellers were found proxying users to other models while stealing their Anthropic credentials.

2026-09-11 ~ 2026-09-11 · 3 related posts

• Hacker Scraped 1.8M Android Apps for Hardcoded API Keys; AI Agents Crawl Military Sites 24/7 — ns123abc · 2026-09-11
• Shinyhunters used stolen Claude access to control home EV chargers in attack on 200 organizations — ns123abc · 2026-09-11
• Fake Claude reseller proxies traffic to other models and steals Anthropic credentials — ns123abc · 2026-09-11