{"schema_version":"0.9.0","id":"LR-2026-0255","record_version":2,"title":"Claude-abused credential-harvesting pipeline decompiling 1.8 million Android APKs","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":52.5,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":6.0,"completeness":5.76,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-10-28","extraction_run_id":null},"system":{"model_name":"Claude","model_version":null,"developer":"Anthropic","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"credential harvesting: scanning decompiled Android APKs for hardcoded secrets","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-10-26","incident_class":"security_compromise","failure_class":null,"agent_involved":true,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"Attackers ran a credential-harvesting pipeline that abused Anthropic's Claude AI to download and decompile 1.8 million Android APKs and scan them for hardcoded secrets.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","severity_because":"major: Attackers used Claude to decompile and scan 1.8 million Android APKs for hardcoded secrets, an unbounded scope of third-party apps affected.","harm_class":[],"affected_description":"1.8 million Android APKs decompiled and scanned for hardcoded secrets","protected_class_involved":null,"data_categories_exposed":["credentials"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://sdtimes.com/mobile-security/fraud-is-getting-faster-thanks-to-ai/","publisher":"news search (Bing News index)","date":"2026-10-26","type":"press","title":"Fraud is Getting Faster, Thanks to AI","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"system.model_name":"C","system.intended_use":"C","system.developer":"C","system.autonomy_level":"D","system.deployment_context":"D","event.adversarial_actor":"C","event.agent_involved":"D","event.incident_class":"D","event.summary":"D","event.date_disclosed":"A","event.trigger":"D","event.detection_method":"D","impact.affected_description":"C","impact.data_categories_exposed":"C","impact.severity":"D","context.denominator_available":"D","context.country":"D","impact.severity_because":"D"},"field_citations":{"system.model_name":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"system.developer":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"system.intended_use":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"event.adversarial_actor":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"event.incident_class":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"event.agent_involved":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"impact.affected_description":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"event.summary":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"impact.severity":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"impact.severity_because":[{"source_index":0,"quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets."}],"event.date_disclosed":[{"source_index":0,"quote":"published: 2026-10-26"}]},"notes_on_gaps":"Only one press source (a Bing News index snippet) is available; no primary disclosure, government evaluator or court filing. No source states the date the abuse occurred, the date it was detected, the detection method, the trigger, the failure_class mechanism, the root cause, the autonomy level, the harness, tools granted, permissions scope, guardrails, deployment context, responsible party, loss figure, third-party count, remediation, containment or notifications. event.trigger omitted (no source states a cause). event.failure_class left null: the source describes attackers abusing the model, not an agent-mechanism failure. incident_class security_compromise and agent_involved=true are classified from the single sentence describing attackers abusing Claude; both are grade D. Severity major rests on the stated 1.8 million APKs scanned (unbounded third-party scope); no dollar figure is given. story.done is null because no source states containment, notification or control changes. system.tier: not set; no operator named and deployment_context is not a lab's. [aggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-28] system.autonomy_level: no source states the arrangement. system.deployment_context: no source states where it ran. event.agent_involved: classified from described behaviour. event.incident_class: a source states an attacker, an injected instruction or a misused credential caused the system to act, or that the system's own boundary (sandbox, permissions, weights, accounts) was breached. event.summary: classified from described behaviour. event.trigger: no source states a cause. event.detection_method: no source says who first noticed. context.denominator_available: no denominator is available for this incident. context.country: no source states the operator's location."},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"Attackers ran a credential-harvesting pipeline that abused Anthropic's Claude AI to download and decompile 1.8 million Android APKs and scan them for hardcoded secrets.","quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets.","source_index":0,"grade":"C"},{"step":"went_wrong","text":"The AI was used to automate extraction of hardcoded secrets from app code, even code protected by obfuscation, breaching the apps' intended secrecy of credentials.","quote":"Attackers use common tools like JEB, Ghidra, and Frida for AI-assisted reverse engineering to extract sensitive information, even when the code is protected by obfuscation.","source_index":0,"grade":"C"},{"step":"reached","text":"It reached 1.8 million Android APKs, scanning them for hardcoded secrets that could enable account takeover.","quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets.","source_index":0,"grade":"C"},{"step":"caught","text":"Anthropic discovered the credential-harvesting pipeline; the source does not say by what means it was first noticed.","quote":"For example, Anthropic discovered a credential-harvesting pipeline that was abusing Claude AI, where attackers downloaded and decompiled 1.8 million Android APKs to scan for hardcoded secrets.","source_index":0,"grade":"C"}],"model":"deepseek-chat","prompt_version":"aggregate-2026-09-27.1","extracted_at":"2026-10-28","source_urls":["https://sdtimes.com/mobile-security/fraud-is-getting-faster-thanks-to-ai/"]}}