AI Account Hijacked Without Permission | Tech News

0:00It's September 8th. This is Tech News today, powered by AI tracking products, companies, and trends. So, this AI consultant, Grant Desward, out in the UK, noticed his AI account was racking up usage even when he wasn't touching it. We're talking about his Claude Max account, and the tokens were just disappearing. He even did a control test, paused everything, and the usage still went up. It's like his AI was on a spending spree without his permission. And, the topic, the company behind Claude, eventually admitted something was wrong. They suspended his account, wiped his sessions, and gave him a partial refund on his monthly subscription. This really messed with his business, because he uses AI agents for everything, from handling emails to coding. It's a big deal when your whole operation relies on these tools, and they suddenly go haywire. After digging around, on BroPick figured out that a compromised session key was used to create unauthorized tokens.

1:00Basically, someone else was using his account, likely a third party service, to do their own AI work. They couldn't pinpoint exactly how the access was gained, but it pointed to either his login info being stolen, or his account being linked to some. Sketchy outside service. Turns out, Desward wasn't the only one. He posted about it online, and found others experiencing similar issues, like accounts being auto upgraded, and tokens vanishing. And, Thropic even sent some users warnings about their tokens being stolen, mentioning a specific type of malware called Info Steelers, that grabs login. Sessions from computers. The company stated this malware doesn't come from using Claude itself, but can be picked up anywhere online. While Anthropic did take action for some users, Desward still feels exposed. He says there's no real way for users to track what's using up their tokens, leaving them vulnerable to this kind of silent theft.