Infostealers are hijacking Claude accounts at users’ expense
Malwarebytes reports infostealers are stealing Claude session cookies to hijack Anthropic accounts and consume victims' usage at their expense.
Anthropic warned that infostealer malware operators are harvesting Claude session cookies from infected machines. Attackers replay the stolen cookies to take over users' accounts and consume their usage quotas, affecting the victims' own access. The activity involves observed account hijacking rather than a flaw in Claude itself.
- Infostealers exfiltrate Claude session cookies from victims
- Stolen cookies enable account takeover and unauthorized usage
- Anthropic issued a warning about the abuse
- Victims lose usage credits while attackers access their accounts
- Vendors
- AnthropicMalwarebytes
- Products
- Claude
- Malware
- infostealer
- Victims
- Claude users
- AI models
- Claude
From the original article
Anthropic has warned that infostealers are stealing Claude session cookies to access users’ accounts and consume usage at their expense.
malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.