Hacker Scraped 1.8M Android Apps for Hardcoded API Keys; AI Agents Crawl Military Sites 24/7
ns123abc · x · 2026-09-11
A string of security developments:
- A ShinyHunters affiliate mass-downloaded 1.8 million Android apps from Google Play, scanned each for hardcoded API keys, and posted credentials to Telegram groups.
- Two undergraduates in Hunan interviewing at QiAnXin for an offensive cyber role reportedly ran "agent swarms" 24/7 to discover zero-days; separately, 13 AI agents are crawling US military sites in a continuous loop.
The cases illustrate AI agents being used at scale for automated attack-surface reconnaissance.
Related event: ShinyHunters Scanned 1.8M Android Apps and Hijacked EV Chargers(3 posts)→
More from Safety
- Was Anthropic alum Jacob Coxon's viral resignation an AI-regulation psyop? — theimposingshadow · 2026-09-11
- X users accuse Anthropic of stoking AI fear to build a regulatory moat against open source — ccerrato147 · 2026-09-11
- Red-teaming public-facing AI agents: turning jailbreaks into repeatable evals — njyx · 2026-09-11
- Senators Welch and Bennet drafting bill for independent AI guardrails — Miles_Brundage · 2026-09-11
- California signs first-in-nation ban on addictive design for minors, plus AI chatbot disclosure law — round · 2026-09-11
- Anthropic report alleges persistent distillation attacks by Alibaba, Moonshot, DeepSeek — TechCrunch AI · 2026-09-11