TerminalFix looks like ClickFix, but delivers a very different payload
Malwarebytes warns TerminalFix mimics the ClickFix fake CAPTCHA social engineering trick but delivers a payload granting attackers access to victims' wider network.
Malwarebytes identified TerminalFix, a variant of the familiar ClickFix fake CAPTCHA social engineering trick. The adapted chain delivers a very different payload, one that can give attackers access to the victim's wider network beyond the initially infected host.
Infostealers are hijacking Claude accounts at users’ expense
Malwarebytes reports infostealers are stealing Claude session cookies to hijack Anthropic accounts and consume victims' usage at their expense.
Anthropic warned that infostealer malware operators are harvesting Claude session cookies from infected machines. Attackers replay the stolen cookies to take over users' accounts and consume their usage quotas, affecting the victims' own access. The activity involves observed account hijacking rather than a flaw in Claude itself.