AI IntelligenceSep 3, 2026AI Intelligence
Article
Infostealers bypass corporate IT controls by replaying stolen Claude session cookies
Infostealers replayed stolen Claude session cookies to access paid, self-serve accounts without triggering two-factor authentication or corporate identity provider controls. Anthropic notified affected users, signed out the compromised accounts, removed saved payment methods, and refunded charges.
Frontier EditorialSource: VentureBeat
01
Source Brief
Infostealers bypass corporate IT controls by replaying stolen Claude session cookies: Infostealers replayed stolen Claude session cookies to access paid, self-serve accounts without triggering two-factor authentication or corporate identity provider controls. Anthropic notified affected users, signed out the compromised accounts, removed saved payment methods, and refunded charges.