Search: “Anthropic users”

68 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 150 Exploit / PoC 86 AI safety & security 84 Malware 68 AI industry 49 Ransomware 42 Threat actor 33 Data breach 30 Policy & legal 28 Model release 20 Phishing & fraud 19 Industry 18 AI tools & infra 13 Research 10

SeverityAll critical 232 high 124 medium 130 low 45 info 135

Anthropic Users Hit by Infostealer Attacks, Session Thefts

A threat actor used multiple infostealers to harvest session data and hijack Claude accounts belonging to an unknown number of users.

Dark Reading reports that a threat actor deployed a variety of infostealer families to collect session information, which was then used to access Claude accounts belonging to an unknown number of users. Anthropic has not disclosed the scale of the compromise. The incident underscores session token theft via infostealer logs as an effective route into AI platform accounts.

Dark ReadingAug 31, 21:08 UTC · 15d agoMalware in the wild

Anthropic cracks down on hijacked user accounts mining AI tokens

Commodity infostealer malware hijacked Anthropic user accounts, letting criminals mine AI tokens on victims' paid usage; Anthropic cracked down on affected accounts.

The Register reports that Anthropic is cracking down on user accounts hijacked through commodity malware that steals authenticated browser sessions. With the stolen sessions, thieves ran AI workloads to mine tokens, freeloading on victims' paid usage allowances. The campaign illustrates how infostealer operators now monetize AI platform credentials and sessions, not just financial accounts.

The Register · SecurityAug 31, 16:03 UTC · 16d agoMalware in the wild

Infostealers Are Hijacking Claude Sessions and Draining Subscriptions

Infostealers hijacked active Claude sessions to bypass 2FA, drain paid usage and run unauthorized charges; Anthropic is revoking sessions and refunding.

Anthropic confirmed that infostealer malware on user machines stole active Claude login sessions, letting attackers bypass passwords, MFA, and SSO and drain paid usage and run unauthorized charges. Affected families identified on Windows include Vidar, LummaC2, StealC, RedLine, and Acreed, plus Atomic Stealer on a small number of Macs; the malware typically arrived via unofficial downloads or malicious apps. Anthropic signed users out, removed saved payment cards, revoked affected sessions, and is refunding unauthorized charges, noting phones and tablets were not involved.

Security AffairsAug 31, 09:17 UTC · 16d agoMalware in the wild

Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR

Help Net SecurityMar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-21262 CVE-2026-261271

OpenAI Disrupts Russian, North Korean, and Chinese Hackers Misusing ChatGPT for Cyberattacks

The Hacker NewsOct 10, 11:26 UTC · Oct 10, 2025Malware

Fake Claude AI Site Drops Beagle Backdoor on Windows Users

Infosecurity MagazineMay 7, 13:15 UTC · May 7, 2026Malware

Infostealers are hijacking Claude accounts at users’ expense

Malwarebytes reports infostealers are stealing Claude session cookies to hijack Anthropic accounts and consume victims' usage at their expense.

Anthropic warned that infostealer malware operators are harvesting Claude session cookies from infected machines. Attackers replay the stolen cookies to take over users' accounts and consume their usage quotas, affecting the victims' own access. The activity involves observed account hijacking rather than a flaw in Claude itself.