Anthropic notified affected customers that malware on their own computers had stolen active Claude login sessions, letting attackers rack up unauthorized usage and charges. The company responded by signing out compromised sessions, removing saved payment cards, and refunding the fraudulent charges. Anthropic clarified the breach originated from infostealer malware on users' devices, not from any compromise of its own systems.
engadget.com
· 2026-09-03
Anthropic has notified a group of Claude users that infostealer malware on their PCs siphoned off active login sessions, letting attackers access their accounts and burn through usage limits. The company is signing out affected accounts, stripping saved payment details, and refunding charges tied to the unauthorized activity while it continues investigating the source.
bleepingcomputer.com
· 2026-08-30
Researchers have identified a new loader tool called WordlistLoader that disguises malicious code as ordinary text files, such as word lists, to slip past security defenses. It's being used in ClickFix-style attacks—where victims are tricked into manually executing commands—to deploy the Amatera infostealer, a malware family that has been rapidly gaining traction among cybercriminals.
darkreading.com
· 2026-08-24
GoKawiil