
Hackers Don’t Need to Break Into the Cloud When They Can Steal the Keys
Wiz says Lumma, RedLine, and Vidar stealers are harvesting cloud, code, and AI credentials.
2
4 stories, newest first · one card per story

Wiz says Lumma, RedLine, and Vidar stealers are harvesting cloud, code, and AI credentials.

Lumma, RedLine, and Vidar steal cloud and developer credentials, enabling session hijacking that bypasses MFA.

Wiz finds Lumma, RedLine, and Vidar dominate infostealer theft of AWS, GitHub, and OpenAI credentials from endpoints.

Infostealers hijacked active Claude sessions to bypass 2FA, drain paid usage and run unauthorized charges; Anthropic is revoking sessions and refunding.
Today 1.6K readers · 2.5K views · 792 reads · all time 189K views