Anthropic cracks down on hijacked user accounts mining AI tokens
Commodity infostealer malware hijacked Anthropic user accounts, letting criminals mine AI tokens on victims' paid usage; Anthropic cracked down on affected accounts.
The Register reports that Anthropic is cracking down on user accounts hijacked through commodity malware that steals authenticated browser sessions. With the stolen sessions, thieves ran AI workloads to mine tokens, freeloading on victims' paid usage allowances. The campaign illustrates how infostealer operators now monetize AI platform credentials and sessions, not just financial accounts.
- Infostealers capture authenticated sessions, bypassing passwords
- Hijacked Anthropic accounts used to run token-mining workloads
- Anthropic took enforcement action against abused accounts
- Session theft extends to AI platform monetization
- Enforce MFA and session hygiene on AI services
- Vendors
- Anthropic
- Products
- Anthropic Claude
- Malware
- commodity infostealer
- Victims
- Anthropic users
- Organizations
- Anthropic
From the original article
Commodity malware steals authenticated sessions, letting thieves freeload on victims' paid usage
theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.