Anthropic Warns Commodity Infostealers Are Hijacking Claude Sessions to Drain Paid Usage

Anthropic warned users over the weekend that a threat actor is using widely available infostealer malware to hijack active Claude login sessions from infected computers, then using those sessions to run up victims' paid usage without ever needing a password or a two-factor code. The company said it identified six malware families in the campaign:...