Infostealer Malware Targets Claude Users to Hijack Browser Sessions
September 1, 2026
Infostealer malware, including Vidar and Lumma, has been used to hijack browser sessions of Claude users to drain usage limits. Anthropic has responded by logging out compromised sessions and issuing refunds for unauthorized charges.
HOW THIS AFFECTS YOU
●
builderYou should monitor user reports of unauthorized API usage caused by session hijacking.
●
founderYou need to consider the security implications of browser-based AI interfaces for your customers.