Anthropic cracks down on hijacked user accounts mining AI tokens

https://image.theregister.com/5293471.jpg?imageId=5293471&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

Commodity malware steals authenticated sessions, letting thieves freeload on victims' paid usage

Rather than paying for their own Claude usage, crims are using malware to steal access to other people's accounts. Aware of this issue, Anthropic has signed at least one affected user out and removed the saved payment method to stop stolen sessions being abused.

According to an email shared by Reddit user WorriedAssociate7029, who sent a copy to The Register, Anthropic has been keeping an eye on a threat actor using infostealer malware to hijack Claude login details, session cookies, and other info needed to subvert multifactor authentication on user accounts. Once obtained, the miscreant is using the stolen information to use premium Claude services without having to pay the bill themselves.

Fortunately for WorriedAssociate7029, Anthropic logged the user out of their account and deleted their stored payment method because it had detected evidence of attempted fraud.

“A...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE

Read more

https://cdn.mos.cms.futurecdn.net/MB6pJa8ZzL8fom8JKMHzwV-1590-80.jpg

Quote of the day by Motorola's cell phone pioneer Martin Cooper: 'People want to talk to other people — not a house, or an office, or a car' — blueprinting the start of a new era of communications

The American engineer Mark Cooper is considered one of the leading pioneers of the wireless communications industry, envisioning a world in which people would communicate wherever they were and not from fixed locations. Without his work in the mid-20th century, the mobile communications industry would arguably be non-existent. Hello Moto