Anthropic cracks down on hijacked user accounts mining AI tokens
Commodity malware steals authenticated sessions, letting thieves freeload on victims' paid usage
Antihuman has taken aggressive action against users who have been hijacking other people's accounts to mine AI tokens. The company has identified the issue and taken steps to prevent further abuse. According to a Reddit user named WorriedAssociate7029, Anthropic has removed payment methods and logged users out of their accounts to stop the theft of sessions.
The company has identified a threat actor using infostealer malware to gain access to Claude login details and session cookies, allowing them to use premium services without paying. WorriedAssociate attributed their own account hack to a rookie mistake of downloading a cracked game and now credits Anthropic for helping secure their account.
The stolen tokens can be resold, making it crucial for providers to protect their users' accounts to avoid financial losses.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- Anthropic cracks down on hijacked user accounts mining AI tokens theregister.com
