Claude sessions hijacked, AI jolts global finance, agents get too many keys

Claude sessions get hijacked Anthropic is warning that common infostealer malware is stealing active Claude browser sessions, letting attackers get into accounts and burn through paid usage without needing a password or two-factor code. The company is signing affected users out, removing stored payment methods and refunding unauthorized charges. But revoking the session doesn't remove the malware, so victims still need to clean the device, change credentials and revoke other active sessions.

Show notes from Defense in Depth.

Explained

The technology and terms in this story. Learn more

More in Threat Intel