{
  "id": 4712205,
  "title": "Anthropic cracks down on hijacked user accounts mining AI tokens",
  "url": "https://urgent.news/2026/08/31/anthropic-cracks-down-on-hijacked-user-accounts-mining-ai-tokens-4712205",
  "topic": "ai",
  "section": "AI",
  "published": "2026-08-31T16:03:46.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/08/31/anthropic-cracks-down-on-hijacked-user-accounts-mining-ai-tokens/5293461"
  },
  "original_language": "en",
  "account": "Antihuman has taken aggressive action against users who have been hijacking other people's accounts to mine AI tokens. The company has identified the issue and taken steps to prevent further abuse. According to a Reddit user named WorriedAssociate7029, Anthropic has removed payment methods and logged users out of their accounts to stop the theft of sessions. The company has identified a threat actor using infostealer malware to gain access to Claude login details and session cookies, allowing them to use premium services without paying. WorriedAssociate attributed their own account hack to a rookie mistake of downloading a cracked game and now credits Anthropic for helping secure their account. The stolen tokens can be resold, making it crucial for providers to protect their users' accounts to avoid financial losses.",
  "summary": "Commodity malware steals authenticated sessions, letting thieves freeload on victims' paid usage",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register",
        "title": "Anthropic cracks down on hijacked user accounts mining AI tokens",
        "url": "https://urgent.news/2026/08/31/anthropic-cracks-down-on-hijacked-user-accounts-mining-ai-tokens",
        "published": "2026-08-31T16:03:46.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}