Hackers Drain Claude Subscribers' Expensive AI Tokens With Stolen Browser Sessions
Anthropic said infostealer malware stole Claude login sessions and consumed users’ usage, while some subscribers reported sudden token spikes and unexpected charges.
- Anthropic recently warned users that infostealers are stealing Claude login sessions from computers to consume account usage, identifying bad actors using common malware to access accounts and alert affected customers.
- Grant Swardt, an independent AI consultant in East Sussex, noticed his Claude Max token usage climbing on August 4 while he performed no work, with usage increasing from 45% to 55% during a controlled interval.
- One Reddit user claimed usage shot from 0% to 100% automatically without consent, while another reported usage spiking to 49 percent in 12 mins, and accounts burned through max tokens every day for three days.
- Following investigation, Anthropic told Swardt a compromised Claude session key minted unauthorized Claude Code OAuth tokens, prompting the company to suspend his account and issue a partial refund of his $200-per-month subscription.
- But the difficulty of getting speedy help and lack of itemized usage soured Swardt on Claude, so he cancelled his subscription in favor of Cursor, which he said works as well as Claude.
20 Articles
20 Articles
Hackers Drain Claude Subscribers' Expensive AI Tokens With Stolen Browser Sessions
Grant De Swardt stared at his usage graph. The independent AI consultant in East Sussex, U.K., hadn’t touched Claude that day. Yet tokens burned. Fast. He shut down every integration. Paused agents. Disabled cloud tasks. The next day, consumption climbed again. From 45% to 55% in a quiet window. No work. No scheduled jobs. Nothing. “In the clearest controlled interval, it increased from 45% to 55% while I performed no work,” De Swardt told TechC…
Hackers gain access to Claude's records using harmful software and waste user currents.
In the ever-expanding world of artificial intelligence, users are facing new threats to the security of their accounts. In this article, we review Grant de Swordt's experience with Cloud token theft and how users can protect themselves. Hackers steal Cloud tokens from subscribers. On August 4th, Grant de Swordt, an independent AI consultant in East Sussex, UK, noticed something strange happening with… The article “Hackers steal Cloud tokens fro…
Some Claude users are currently looking shocked at their token consumption. Although they sometimes don't use AI tools for days, consumption continues to rise.
Coverage Details
Bias Distribution
- 80% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
