Expired50% confidenceEventExact time
Anthropic disclosed that hackers used credential-stealing trojans such as Cedar and Amos to steal Claude login credentials and misappropriate users' drawing and API quotas.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
9/11/2026
First Seen
Valid until: 9/25/2026(expired)
Sources
Related Entities
Related Claims
UnverifiedAnthropic's Claude may generate code referencing non-existent software packages when assisting with programming, and once these fictitious package names are registered by malicious actors, they can become attack vectors for stealing real API keys.65% similarUnverifiedSecurity researchers have repeatedly found that popular IDE cracking tools bundle information-stealing trojans (such as RedLine Stealer and Raccoon Stealer) that can extract browser passwords, cryptocurrency wallet private keys, SSH keys, and developer credentials such as AWS Access Keys and GitHub Tokens.63% similarUnverifiedAnthropic operates a bug bounty program through the HackerOne platform.63% similarUnverifiedCommon methods for stealing Claude tokens include phishing attacks, third-party application vulnerabilities, and local file theft.61% similarUnverifiedAnthropic issued a security warning to all users, confirming the existence of attacks in which hackers steal Claude tokens.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/904970API
curl https://kongchang.com/api/v1/knowledge/claims/904970MCP
get_claim(id=904970)