ANTHROPIC FORCES CLAUDE LOGOUTS AFTER MALWARE HIJACKS SESSIONS

The AI company discovered that infostealer malware infections on user devices compromised Claude login sessions, allowing attackers to make unauthorized API calls and rack up charges. In response, Anthropic has taken several precautionary measures: - Signed out affected Claude users from their accounts - Removed and reset saved payment methods - Initiated refund processing for fraudulent usage charges The incident underscores risks for users accessing cloud services from compromised machines. Infostealer malware—which typically harvests browser cookies, stored credentials, and session tokens—remains a persistent threat. Users are advised to ensure their devices are clean of malware before resuming Claude access. Anthropic has not disclosed the total number of affected users or the scope of fraudulent charges. The company recommends customers monitor their accounts for suspicious activity and consider updating passwords from secure devices.