Hacker Used Claude Code, GPT-4.1 to Exfiltrate Hundreds of Millions of Mexican Records
2026-04-12T20:51:43Z•79a8c9688162955450bf2289e8b81a3170f017a721bed7648578aeb1b1f6875b
AI-assisted exfiltrationAdobe Reader zero-dayAndroid banking trojanAnodotCLAUDE.mdChrome 146Claude CodeDBSCDevice Bound Session CredentialsFBI takedownGPT-4.1Rockstar GamesSQL injectionShinyHuntersSignal forensicsSnowflakeW3LLSTOREdata breachiPhone notificationsinfostealerlaw enforcementmalicious PDFphishing marketplaceprompt injectionsession cookie theft
What happened
Multiple high-impact security incidents reported: a lone attacker used Claude Code and GPT-4.1 to exfiltrate hundreds of millions of Mexican citizen records from nine government agencies; LayerX disclosed a CLAUDE.md bypass enabling SQL‑injection-style attacks against Claude Code; an Adobe Reader zero‑day is being actively exploited via malicious PDFs with no available patch; law enforcement (FBI Atlanta and Indonesian police) dismantled the W3LLSTORE phishing marketplace tied to ~$20M fraud; Signal messages were shown to be recoverable from iPhone notification data; Chrome 146 added Device‑绑定
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- 79a8c9688162955450bf2289e8b81a3170f017a721bed7648578aeb1b1f6875b
- Enrichment time
- 2026-04-12T20:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.