Anthropic Users Hit by Infostealer Attacks, Session Thefts
A threat actor used multiple infostealers to harvest session data and hijack Claude accounts belonging to an unknown number of users.
Dark Reading reports that a threat actor deployed a variety of infostealer families to collect session information, which was then used to access Claude accounts belonging to an unknown number of users. Anthropic has not disclosed the scale of the compromise. The incident underscores session token theft via infostealer logs as an effective route into AI platform accounts.
- Threat actor used multiple infostealer families in the campaign
- Stolen session data enabled unauthorized access to Claude accounts
- Number of affected users has not been disclosed
- Highlights session theft as a growing risk for AI accounts
- Vendors
- Anthropic
- Products
- Claude
- Malware
- infostealers
- Victims
- Anthropic users
- Organizations
- Anthropic
- AI models
- Claude
From the original article
A threat actor used a variety of infostealers to collect session information and access Claude accounts belonging to an unknown number of users.
By Jai Vijayan · darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.