Anthropic Confirms Hackers Stealing Claude Session Tokens to Bypass 2FA

Anthropic has notified some Claude users that their accounts were compromised by malware designed to steal login session tokens. The company confirmed that these attackers are using the stolen sessions to impersonate users, effectively bypassing two-factor authentication (2FA) protections.