Anthropic warns infostealer malware is hijacking Claude sessions to drain quota

cyb3rops · x · 2026-08-31

Anthropic has warned that info-stealing malware (such as Vidar and LummaC2) is stealing active Claude login sessions from local devices, allowing attackers to access accounts and consume usage quotas. The company clarified this is not a vulnerability in Claude itself but stems from general malware infections on user devices. Anthropic is signing out affected users, removing saved payment methods, and refunding unauthorized charges.

Related event: Anthropic Logs Out Users as Info-Stealers Hijack Claude Sessions(2 posts)→

Original post →

More from Safety

Safety channel →