Infostealers are draining Claude subscribers’ paid token allowances

Infostealer malware is being used to steal active Claude login sessions, letting attackers consume subscribers’ paid token allowances without their knowledge. Anthropic says the attacks begin on users’ devices rather than with a breach of Claude’s infrastructure, but the resulting session hijacking can still trigger exhausted quotas, unauthorized charges, and account suspensions.
Source

👉@sysadminoff

https://4sysops.com/archives/infostealers-are-draining-claude-subscribers-paid-token-allowances/