Hackers are stealing Claude tokens from subscribers
Last month, a Claude user noticed his account was consuming tokens even though he wasn't working. Anthropic has since warned users about hackers.
TL;DR
- Grant de Swardt, an AI consultant, noticed his Claude Max 20x account consuming tokens without active use.
- Anthropic suspended his account, issued a partial refund, and identified a compromised session key as the cause of unauthorized token minting.
- Other Claude users have reported similar instances of unexpected and rapid token consumption.
- Anthropic has warned some users about infostealer malware that steals Claude login sessions.
- The company stated that the malware does not originate from using Claude itself.
- De Swardt experienced difficulties in getting a resolution and switched to Cursor due to concerns about security and lack of itemized usage tracking.
- Anthropic declined to comment on how users can identify misuse.