Stolen Claude session cookies can reach corporate Gmail through grants no IT admin can revoke

August 31, 2026 · 9:08 pm 2 sources

Image: Dark Reading

Coverage

Coverage

• Anthropic Users Hit by Infostealer Attacks, Session Thefts
  Dark Reading · August 31, 2026 21:08
  A threat actor used a variety of infostealers to collect session information and access Claude accounts belonging to an unknown number of users.

More coverage

• Stolen Claude session cookies can reach corporate Gmail through grants no IT admin can revoke
  VentureBeat · September 2, 2026 17:51
  Infostealers replayed stolen Claude session cookies into paid accounts without ever touching the login page two-factor authentication guards. The accounts Anthropic flagged were card-billed, self-serve accounts, which is the population no corporate identity provider governs, and no admin console…