Hackers are stealing Claude tokens from subscribers

Anthropic signed out Claude users and refunded charges after infostealer malware stole login sessions from their PCs. Six malware families, including Vidar, Lumma, and RedLine, were identified. Grant De Swardt's Claude Max account was compromised, consuming tokens without his use, leading to a partial refund and his cancellation.