Malware

Acreed

0 mentions in 7 days · 2 in 30 days · 2 total · first seen Aug 31, 2026 · last 15d ago

Timeline2 articles

Infostealers Are Hijacking Claude Sessions and Draining Subscriptions

Infostealers hijacked active Claude sessions to bypass 2FA, drain paid usage and run unauthorized charges; Anthropic is revoking sessions and refunding.

Anthropic confirmed that infostealer malware on user machines stole active Claude login sessions, letting attackers bypass passwords, MFA, and SSO and drain paid usage and run unauthorized charges. Affected families identified on Windows include Vidar, LummaC2, StealC, RedLine, and Acreed, plus Atomic Stealer on a small number of Macs; the malware typically arrived via unofficial downloads or malicious apps. Anthropic signed users out, removed saved payment cards, revoked affected sessions, and is refunding unauthorized charges, noting phones and tablets were not involved.

Security AffairsAug 31, 09:17 UTC · 15d agoMalware in the wild

Anthropic locks out Claude users after infostealers hijack login sessions

Anthropic invalidated Claude sessions compromised by infostealers such as Vidar, Lumma and Atomic Stealer, which steal browser cookies to bypass 2FA.

Anthropic began locking users out of Claude accounts after infostealer malware stole browser session cookies, letting attackers replay logins and bypass two-factor authentication. Identified malware includes Vidar, Lumma (LummaC2), StealC, RedLine and Acreed on Windows and Atomic Stealer (AMOS) on a small number of Macs. Anthropic signed affected users out, removed saved payment methods and refunded unauthorized charges. One affected user traced the infection to a pirated game downloaded from a Russian underground forum; the company advised victims to remove the malware before resetting passwords and re-enabling 2FA.

Help Net SecurityAug 31, 00:00 UTC · 15d agoData breach in the wild1

Appears with

organization Anthropic 2 product Claude 2 vendor Anthropic 2 malware StealC 2 malware Atomic Stealer 2 malware Vidar 2 malware RedLine 2 victim Anthropic users 1 malware Lumma 1 malware LummaC2 1 ai model Claude 1 victim Anthropic 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.