Anthropic Users Hit by Infostealer Attacks, Session Thefts
A threat actor used multiple infostealers to harvest session data and hijack Claude accounts belonging to an unknown number of users.
55
Victim
Anthropic users
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 31, 2026
- Last mentionedAug 31, 2026
Timeline
3 articles · newest firstAnthropic cracks down on hijacked user accounts mining AI tokens
Commodity infostealer malware hijacked Anthropic user accounts, letting criminals mine AI tokens on victims' paid usage; Anthropic cracked down on affected accounts.
55
Infostealers Are Hijacking Claude Sessions and Draining Subscriptions
Infostealers hijacked active Claude sessions to bypass 2FA, drain paid usage and run unauthorized charges; Anthropic is revoking sessions and refunding.
68
Appears with
- Anthropicvendor · 3
- Anthropicorganization · 3
- Claudeproduct · 2
- Claudeai model · 2
- LummaC2malware · 1
- StealCmalware · 1
- Vidarmalware · 1
- Acreedmalware · 1
- infostealersmalware · 1
- commodity infostealermalware · 1
- Atomic Stealermalware · 1
- Anthropic Claudeproduct · 1
- RedLinemalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.