#token-theft

Infostealer malware is silently draining Claude Max subscribers' token limits

Anthropic confirmed that bad actors are using common malware to steal session keys and mint unauthorized OAuth tokens, consuming paid usage without user knowledge.