Hackers are exploiting a vulnerability to steal Claude tokens from Anthropic subscribers, leading to unauthorized usage and potential account compromises. Users have reported significant token consumption even when not actively using the service, with some accounts being automatically upgraded and charged. Anthropic has acknowledged the issue, identifying infostealer malware as a common vector for stealing session data and login credentials, and has taken steps to protect affected users by invalidating sessions and issuing refunds. AI
IMPACT Highlights a critical security vulnerability in AI service access, potentially impacting user trust and adoption.
RANK_REASON The cluster describes a security vulnerability affecting a specific product and its users, rather than a new release or fundamental research.
Read on Mastodon — mastodon.social →
- Anthropic
- Claude
- Claude Code
- GitHub
- Grant de Swardt
- infostealer malware
- Mastodon
- OAuth
- Claude Max (20x)
AI-generated summary · Google Gemini · from 7 sources. How we write summaries →