30
30
30
30
30
30
30
30
45
30
30
30
30
30
30
45
30
30
30
35
30
35
45
30
45
30
30
30
30
30
30
30
30
35
Infostealers are hijacking Claude accounts at users’ expense
Malwarebytes reports infostealers are stealing Claude session cookies to hijack Anthropic accounts and consume victims' usage at their expense.
Anthropic warned that infostealer malware operators are harvesting Claude session cookies from infected machines. Attackers replay the stolen cookies to take over users' accounts and consume their usage quotas, affecting the victims' own access. The activity involves observed account hijacking rather than a flaw in Claude itself.
55
30
Anthropic Users Hit by Infostealer Attacks, Session Thefts
A threat actor used multiple infostealers to harvest session data and hijack Claude accounts belonging to an unknown number of users.
Dark Reading reports that a threat actor deployed a variety of infostealer families to collect session information, which was then used to access Claude accounts belonging to an unknown number of users. Anthropic has not disclosed the scale of the compromise. The incident underscores session token theft via infostealer logs as an effective route into AI platform accounts.
55
30
30
30