Summary

Anthropic warned that general-purpose infostealers including Vidar, Lumma, StealC and AMOS had harvested credentials and Claude session data from infected devices. The company signed out compromised sessions, removed saved payment methods and refunded unauthorised charges it identified.

Why it matters

The incident shows that AI-account security increasingly depends on endpoint and session protection rather than model safeguards alone.

Sources