[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frJZQnBJVbz5XD-geYzoSSfETe9S3EBVZFUrNWp_3lxI":3},{"article":4,"iocs":50},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":24,"category":25,"article_tags":29},"136f0562-dd46-4f07-b590-e830294920b2","Anthropic Warns Claude Users of Infostealer Malware Infections","anthropic-warns-claude-users-of-infostealer-malware-infections-0f9eda","The AI giant is logging customers out of their accounts and removing payment data to prevent unauthorized Claude usage. The post Anthropic Warns Claude Users of Infostealer Malware Infections appeared first on SecurityWeek.","Anthropic has alerted some Claude users that infostealer malware on their computers enabled attackers to hijack login sessions and exploit usage limits. The AI company is taking precautionary measures by logging out compromised sessions and removing saved payment methods to prevent unauthorized usage and charges. The malware, including Vidar, Lumma, StealC, RedLine, Acreed, and Atomic Stealer, is general-purpose and not specific to Claude, typically spreading through unofficial downloads.","Anthropic warns Claude users of infostealer malware hijacking accounts.","Anthropic has warned some Claude users that infostealer malware on their computers allowed attackers to hijack login sessions and run up usage limits, according to an email the company sent to affected customers. The company said it detected the activity, signed out the compromised sessions, and removed saved payment methods from affected accounts as a precaution. Anthropic is alerting Claude AI users whose computers were infected with infostealer malware such as Vidar, Lumma, StealC, RedLine, and Acreed on Windows, along with Atomic Stealer (AMOS) on a small number of macOS devices. The AI giant emphasized that the malware is general-purpose and not tied to Claude itself, typically arriving via unofficial downloads or malicious apps. The company said the malware quietly copies saved passwords, browser login cookies, and credentials for other local applications. Anthropic believes a threat actor subsequently began selecting the stolen Claude sessions out of that harvested data and using them to access accounts. Users who saw their usage limits appear to refill and then drain without actively using Claude were told this was the likely cause.Advertisement. Scroll to continue reading. In response to the campaign, Anthropic signed out the affected sessions and warned it may sign users out again if it observes further signs of account misuse. The company also said it removed saved payment methods so accounts could not be charged, and users must add a payment method again to renew or make further purchases. Anthropic also noted that it refunded any Claude charges it identified as unauthorized. Victims of this campaign have been told to only re-add a payment method after ensuring that all malware has been removed from their computers. Related: Irregular Details How a Naming Error Let AI Models Attack a Real Company Related: Judge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and Baseless’ Related: Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware Written By Eduard Kovacs Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering. Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from Eduard Kovacs More Details Emerge on Exploited PaperCut VulnerabilitiesHasbro Data Breach Exposed Employee Personal InformationATF Confirms Cyber Incident After Ransomware Group Claims AttackOpenAI Agents Exploited Linux Kernel Flaw on Company’s Own SystemsTech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense PledgePaperCut Releases Emergency Patch for Exploited Zero-DayTrump Order Aims to Block Foreign Backdoors in US Power Grid GearAustralia Arrests 2 Alleged TeamPCP Hackers Latest News ServiceNow Patches 3 Critical Code Injection VulnerabilitiesMcKesson Confirms Data Breach as Attacker Deadline LoomsWhat the Hugging Face Incident Teaches Security Leaders About AI Agent AccessCritical Ruby on Rails Vulnerability in Attackers’ CrosshairsBoston Scientific Still Recovering From CyberattackExtortion Group Claims Manchester Airports Group Data BreachJudge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and Baseless’Berlin Won’t Pay Extortion Group Claiming Data Theft Trending Daily Briefing NewsletterSubscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Virtual Event: Attack Surface Management Summit 2026 September 16, 2026 Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs. Register Webinar: Minimum Viable Business: Can You Prove Your Organization Would Recover? September 2, 2026 In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk. Register People on the MoveSocial engineering protection company Doppel has promoted Alyssa Smrekar to Chief Marketing Officer.Naveen Bhateja has been appointed Chief People Officer at HackerOne.The Department of War has appointed Sonu Shankar as Principal Deputy Chief Information Officer.More People On The MoveExpert Insights What the Hugging Face Incident Teaches Security Leaders About AI Agent Access Security teams must treat autonomous agents as highly privileged identities. (Etay Maor) The Future of AI-Driven Security Depends on Complete Data For twenty-five years, \"data\" in security meant logs and events. But logs are a lossy representation of reality. (Danelle Au) The MFA Identity Trap: When Authentication Creates a False Sense of Security Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop. (Torsten George) Silent Patches Don’t Stop Attackers – They Blind Defenders Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk. (Tod Beardsley) Hired for One Job, Judged on Another: The CISO’s Real Problem The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job. (Sravish Sridhar) Flipboard Reddit Whatsapp Whatsapp Email","https:\u002F\u002Fwww.securityweek.com\u002Fanthropic-warns-claude-users-of-infostealer-malware-infections\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F08\u002Fmalware-infection.webp","2026-08-31T12:11:58+00:00","2026-08-31T14:00:12.472257+00:00",7,[18,21],{"name":19,"type":20},"Claude","product",{"name":22,"type":23},"Anthropic","vendor","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":24,"icon":26,"name":27,"slug":28},null,"Threat Intelligence","threat-intelligence",[30,35,40,45],{"category":31},{"id":32,"icon":26,"name":33,"slug":34},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":36},{"id":37,"icon":26,"name":38,"slug":39},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":41},{"id":42,"icon":26,"name":43,"slug":44},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":46},{"id":47,"icon":26,"name":48,"slug":49},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[51,54,56,58,60,62,64],{"type":49,"value":52,"context":53},"Vidar","Infostealer malware mentioned as a cause of account compromise.",{"type":49,"value":55,"context":53},"Lumma",{"type":49,"value":57,"context":53},"StealC",{"type":49,"value":59,"context":53},"RedLine",{"type":49,"value":61,"context":53},"Acreed",{"type":49,"value":63,"context":53},"Atomic Stealer",{"type":49,"value":65,"context":53},"AMOS"]