Claude Hackers Are Hijacking Tokens From Paying Subscribers
Anthropic said infostealer malware stole Claude login sessions and consumed users’ usage, while some subscribers reported sudden token spikes and unexpected charges.
- Anthropic recently warned users that infostealers are stealing Claude login sessions from computers to consume account usage, identifying bad actors using common malware to access accounts.
- Grant Swardt, an independent AI consultant in East Sussex, noticed his Claude Max token usage climbing on August 4 while he performed no work, increasing from 45% to 55% during a controlled interval.
- One Reddit user claimed usage shot from 0% to 100% automatically without consent, while another reported usage spiking in 12 mins, and accounts burned through max tokens every day for three days.
- Anthropic told Swardt a compromised Claude session key was used to mint unauthorized Claude Code OAuth tokens, then suspended his account and issued a partial refund of his $200-per-month subscription.
- But the difficulty of getting speedy help and lack of itemized usage soured Swardt on Claude, so he cancelled his subscription in favor of Cursor, which he said works as well.
25 Articles
25 Articles
Hackers Drain Claude Subscribers' Expensive AI Tokens With Stolen Browser Sessions
Grant De Swardt stared at his usage graph. The independent AI consultant in East Sussex, U.K., hadn’t touched Claude that day. Yet tokens burned. Fast. He shut down every integration. Paused agents. Disabled cloud tasks. The next day, consumption climbed again. From 45% to 55% in a quiet window. No work. No scheduled jobs. Nothing. “In the clearest controlled interval, it increased from 45% to 55% while I performed no work,” De Swardt told TechC…
Hackers gain access to Claude's records using harmful software and waste user currents.
In the ever-expanding world of artificial intelligence, users are facing new threats to the security of their accounts. In this article, we review Grant de Swordt's experience with Cloud token theft and how users can protect themselves. Hackers steal Cloud tokens from subscribers. On August 4th, Grant de Swordt, an independent AI consultant in East Sussex, UK, noticed something strange happening with… The article “Hackers steal Cloud tokens fro…
Coverage Details
Bias Distribution
- 83% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
