Skip to content
AI IntelligenceSep 3, 2026AI Intelligence
Article

Infostealers bypass corporate IT controls by replaying stolen Claude session cookies

Infostealers replayed stolen Claude session cookies to access paid, self-serve accounts without triggering two-factor authentication or corporate identity provider controls. Anthropic notified affected users, signed out the compromised accounts, removed saved payment methods, and refunded charges.

Frontier EditorialSource: VentureBeat
01

Source Brief

Infostealers bypass corporate IT controls by replaying stolen Claude session cookies: Infostealers replayed stolen Claude session cookies to access paid, self-serve accounts without triggering two-factor authentication or corporate identity provider controls. Anthropic notified affected users, signed out the compromised accounts, removed saved payment methods, and refunded charges.