57
57
45
57
57
57
57
57
57
45
57
57
57
60
Anthropic locks out Claude users after infostealers hijack login sessions
Anthropic invalidated Claude sessions compromised by infostealers such as Vidar, Lumma and Atomic Stealer, which steal browser cookies to bypass 2FA.
Anthropic began locking users out of Claude accounts after infostealer malware stole browser session cookies, letting attackers replay logins and bypass two-factor authentication. Identified malware includes Vidar, Lumma (LummaC2), StealC, RedLine and Acreed on Windows and Atomic Stealer (AMOS) on a small number of Macs. Anthropic signed affected users out, removed saved payment methods and refunded unauthorized charges. One affected user traced the infection to a pirated game downloaded from a Russian underground forum; the company advised victims to remove the malware before resetting passwords and re-enabling 2FA.
70
60
57
60
60
60
45
57
57
60
57
60
57
60
60
57
57
57
57
57
57
60
Legacy Lenovo login opens 5,000 Dropbox accounts to attackers
Dropbox warned about 5,000 users that attackers abused a legacy Lenovo ID login integration to access accounts and files between August 4 and 21.
Attackers exploited an integration allowing Dropbox access via Lenovo IDs, registering Lenovo IDs with Dropbox users' email addresses due to a flaw in Lenovo's email verification process. The compromise lasted from August 4 to 21; attackers accessed files belonging to fewer than a third of the roughly 5,000 affected users, none of whom had 2FA enabled. Bitcoin security company Casa co-founder Jameson Lopp reported attackers attempted to access one locally encrypted file. Dropbox expired all Lenovo ID sessions, severed the integration link, and urged affected users to reset passwords and enable 2FA while Lenovo's investigation continues.
68
45
60
60