{"rewrite":{"id":"r_dc50fd192ceac7d0234af2be","clusterId":"c_14bccefb04282b9d49a065c9","slug":"anthropic-logs-out-claude-users-hit-by-infostealer-malware","model":"deepseek-v4-flash","headline":"Anthropic Logs Out Claude Users Hit by Infostealer Malware","summary":"Anthropic confirmed infostealer malware hijacking Claude login sessions to drain usage. The company forcibly logged out affected users, removed their payment methods, and refunded unauthorized charges. The malware copies browser cookies and credentials, so two-factor authentication does not stop it. One Reddit user reported infection from pirated games.","whyItMatters":"Anthropic's forced logout and refunds show that session hijacking bypasses login protections, pushing the burden onto users to avoid suspicious software.","webCardHtml":"\u003cp\u003eAnthropic detected malware that hijacks users\u0026#39; Claude login sessions and drains their usage. The company responded by forcibly logging out affected users, removing their payment methods, and refunding charges for the unauthorized period.\u003c/p\u003e\u003cp\u003eThe malware, a type of infostealer, copies browser cookies and credentials from locally running software. Since it takes over browsers already logged into Claude accounts, two-factor authentication at login cannot prevent the unauthorized use. One affected user on Reddit confirmed that two-factor authentication did not work.\u003c/p\u003e\u003cp\u003eAnthropic noted the malware is common and likely came from unofficial software, not through Claude itself. The same user reported being infected after installing pirated games, and the malware also hijacked their social media accounts to post cryptocurrency scams.\u003c/p\u003e","blueskyPost":"Anthropic is forcibly logging out Claude users hit by infostealer malware, removing payment methods, and refunding unauthorized charges. The malware steals browser sessions, so 2FA can't stop it. The advice: don't install suspicious software.","twitterPost":"Anthropic forcibly logs out Claude users hit by infostealer malware, removes payment methods, and refunds unauthorized charges. Session hijacking bypasses 2FA. Avoid suspicious software.","threadsPost":null,"newsletterBlurb":"Anthropic confirmed infostealer malware hijacking Claude sessions to drain usage. The company logged out affected users, removed payment methods, and refunded unauthorized charges. Since the malware steals browser cookies, two-factor authentication cannot prevent the abuse.","attributionJson":"[{\"source\":\"GIGAZINE\",\"url\":\"https://gigazine.net/news/20260831-anthropic-warn-malware/\",\"title\":\"Anthropic forcibly logs out users suspected of malware infection, removes payment methods, and issues refunds\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":4568,"outputTokens":533,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1788149013,"createdAt":"2026-08-31T03:53:06.000Z","publishedAt":"2026-08-31T03:57:27.000Z","updatedAt":"2026-08-31T03:57:27.000Z"},"cluster":{"id":"c_14bccefb04282b9d49a065c9","canonicalTitle":"Anthropicがマルウェア感染の疑いがあるユーザーを強制ログアウトさせ支払い方法を削除し返金処理を実施","representativeArticleId":"a_039f526e71c49b56afe4f355","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[\"Claude\"],\"studios\":[\"Anthropic\"],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-08-31T02:49:00.000Z","lastSeenAt":"2026-08-31T02:49:00.000Z","updatedAt":"2026-08-31T03:57:30.000Z"},"attribution":[{"source":"GIGAZINE","url":"https://gigazine.net/news/20260831-anthropic-warn-malware/","title":"Anthropicがマルウェア感染の疑いがあるユーザーを強制ログアウトさせ支払い方法を削除し返金処理を実施"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":["Claude"],"studios":["Anthropic"],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":null}