Connect with us

News

Hackers are stealing Claude tokens from subscribers

info

Published

on

GettyImages 2278736523.jpeg

On August 4, Grant De Swardt, an independent AI consultant in East Sussex, U.K., noticed something strange going on with his Claude Max 20x account. He hadn’t been working that day, yet his token usage was climbing.

The next day, he disabled everything he had attached to Claude and did not work with it. Token consumption again increased. “In the clearest controlled interval, it increased from 45% to 55% while I performed no work, scheduled Cowork tasks were paused or completed, Dispatch/cloud execution was disabled, and there was no corresponding active local Claude Code task,” De Swardt told TechCrunch.

What was eating up his token allowance? He had no idea, so he contacted Anthropic and asked for an itemized list. Anthropic didn’t provide one, but it agreed something was off. It suspended his paid account, invalidated all of his sessions and server-side Claude Code tokens, and issued him a partial refund of £44.49 for the remaining time on his $200-per-month subscription.

The suspension wreaked havok on his business, he told TechCrunch. His job is to help small and mid-size businesses set up agents — a sort of forward-deployed engineer for hire — for tasks like automatically loading purchase-order data from emails into the accounting software.

As a sole proprietor, he relies on agents throughout his whole business, too: daily admin tasks, website design, coding. “Like everything is just running through AI these days,” he said.

After investigating, Anthropic told De Swardt it found the culprit: A compromised Claude session key was used to mint unauthorized Claude Code OAuth tokens. The company told him the account “appeared to have been used by an unauthorized-looking third-party service to handle activity for other people, but they could not determine how it obtained access,” he told TechCrunch. “They say the evidence is consistent either with credentials/session data being taken without my knowledge, or with the account having been connected to an outside service.”

In other words, a hacker was able to obtain access to De Swardt’s account and was covertly siphoning off his tokens. Because account support tracks total usage but not itemized usage, even upon request, this kind of theft could have gone on for months undetected.

He posted his experience on Reddit and after 80 comments, he discovered he was not alone. One person claimed that their account “was auto-upgraded without my consent, my credit card got charged, and the usage shot from 0% to 100% automatically without me even touching it.” Another saw usage go from 0 to 49% in 12 minutes, when all they had used it for was a couple of prompts and a web search.

One Claude user said their account burned through its max tokens every day for three days without them using it at all; this person then created a GitHub report about it. Like with the Reddit post, other users shared similar experiences there, too.

Two of them posted emails from Anthropic where the company had — to its credit — identified and warned them that their tokens were being stolen.

“We have recently become aware of a bad actor that is using common infostealer malware to steal Claude login sessions from people’s computers, then using those login sessions to access Claude accounts and consume their usage,” the email read. Infostealers are a type of malware that installs itself on a user’s computer and steals saved passwords, session data, and login credentials.

When Anthropic saw suspicious activity, it signed the users out, invalidated existing authorizations, issued some refunds, and warned them that they may have malware.

The company also said the malware didn’t come from using Claude itself. Such malware can be picked up from many sources online, from downloading infected software to clicking on infected ads.

Anthropic did not send De Swardt one of those emails. He insists he found no evidence that his computer was compromised and says he still has no way of determining how hackers gained access.

De Swardt’s Claude account was reinstated after about two weeks. But the difficulty of getting speedy help for the matter, plus the lack of an itemized usage, soured him on Claude. He cancelled his subscription in favor of Cursor and its ability to use multiple models, including more affordable open source options.

In his experience, these other models work as well as Claude. “It’s not that much different or better,” he said, adding that he can’t see going back “without [Anthropic] actually having resolved the issue in any way.”

He says Anthropic still lacks tools that allow users to see what’s consuming their tokens. “I don’t think there’s any way that these people can protect themselves.”

When asked for information on how users can identify misuse, Anthropic declined to comment.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

INEC Disowns Publication On Gov Candidates List In Six States

info

Published

on

Incollage 20261012 0849283204891468998039239376 1200x675.jpg

The Independent National Electoral Commission (INEC) has disowned a fake online publication claiming to be a special announcement on governorship candidates in six states.

Politics Nigeria reports that the commission identified the affected states as Zamfara, Gombe, Delta, Plateau, Yobe and Kano.

It urged members of the public to disregard the publication and rely on its verified communication channels for electoral information.

INEC said the publication did not originate from the commission and described it as fraudulent.

“The Commission wishes to categorically inform the general public that the publication is FAKE and did not originate from INEC,” the statement partly read.

“INEC therefore urges members of the public to disregard the fraudulent publication and refrain from sharing it.”

The commission’s warning comes amid concerns over the omission of several candidates from its final list of governorship candidates for the 2027 elections.

In Kano State, the Kwankwassiyya Movement has vowed to engage INEC over the omission of Mustapha Rabiu Kwankwaso, the Nigeria Democratic Congress (NDC) deputy governorship candidate, and his principal, Aminu Abdussalam Gwarzo, from the final list.

Habibu Mohammed, spokesperson for the movement, said the omissions came as a shock, insisting that the candidates had met the requirements for registration.

Speaking on Arise Television, Mohammed said the movement would explore the legal provisions available to candidates whose names were omitted from the commission’s list.

“It came as a shock because there had been no issue with INEC. Kwankwas, a former deputy governor, is registered with the NDC and met the stipulated deadline,” he said.

He added that electoral provisions allow affected candidates 14 days to seek redress over omissions from the list.

“We will explore that opportunity and engage with INEC,” Mohammed said.

The spokesperson maintained that the movement was unaware of any court judgment or order that could have justified the omission.

He expressed confidence that the matter would be resolved through engagement with the commission and the available legal procedures.

The NDC has also described the omission as an error and said it is seeking a correction.

Meanwhile, the Peoples Democratic Party (PDP) has also begun engaging INEC over the omission of its governorship candidates in Ogun and Gombe states.

The party’s National Publicity Secretary, Jungudo Mohammed, disclosed this in a statement on Sunday, saying the party was working towards an amicable resolution in line with the law and established electoral guidelines.

Independent National Electoral Commission, INEC
Independent National Electoral Commission, INEC.

He assured affected candidates, members and supporters that the party was treating the matter seriously and would communicate further developments when necessary.

The PDP also urged those affected to remain calm and exercise patience while discussions with the commission continued.

This was just as the party warned against actions or statements that could undermine the ongoing engagements with INEC, stressing its commitment to addressing the concerns through lawful means.

INEC released its final list of candidates for the February 6, 2027 governorship elections on Saturday.

The list, signed by the commission’s Secretary, Rose Oriaran-Anthony, and published on its website, contained 13 candidates in Ogun State and 16 in Gombe State, with no PDP candidate listed in either state.

Among those omitted were Ladi Adebutu, the PDP candidate in Ogun State, and Isa Ali Pantami, the party’s candidate in Gombe State.

 

Continue Reading

Business

NPA to fix rail, logistics gaps at inland dry ports

info

Published

on

716230728 18402984094159892 2837159792095527570 n.jpg

The Nigerian Ports Authority (NPA) has moved to address rail connectivity and logistics challenges affecting inland dry ports as part of efforts to integrate the facilities into the nation’s port system and improve cargo movement across the country.

The move followed a meeting between the NPA management, led by its Managing Director, Abubakar Dantsoho, and the Executive Director of Dala Inland Dry Port, Ahmad Rabiu, alongside representatives of Funtua Inland Dry Port, at the authority’s corporate headquarters in Marina, Lagos.

The engagement came after the Minister of Marine and Blue Economy, Adegboyega Oyetola, directed the transfer of operational oversight of inland dry ports to the NPA.

The discussions focused on strengthening institutional collaboration, addressing infrastructure constraints and improving operational efficiency across Nigeria’s maritime logistics chain.

Speaking during the meeting, Mr Dantsoho stressed the need to upgrade inland dry port infrastructure and technical capacity to complement ongoing modernisation efforts at the nation’s seaports.

He said the facilities must be equipped to handle increasing cargo volumes and support the broader transformation of Nigeria’s maritime sector.

PT WHATSAPP CHANNEL
Dangote Refinery AD

“For our Inland Dry Ports to function at the same velocity as the ongoing modernisation across our seaports, we must proactively upgrade dry port infrastructure and technical capacity,” Mr Dantsoho said.

He explained that the integration of digital platforms, including the Port Community System (PCS) and the National Single Window, into seaport operations must be matched by corresponding improvements at inland dry ports.

“As we integrate digital systems such as the Port Community System (PCS) and the National Single Window in our seaports, the dry ports must deploy modern equipment and advanced technical capabilities to handle larger cargo volumes and bigger vessels coming to our coast,” he added.

Increased private-sector investment

The NPA managing director also called for increased private-sector investment in inland dry port infrastructure, noting that stronger investment would be critical to improving cargo handling capacity and operational efficiency.

He cited APM Terminals’ establishment of an Export Processing Terminal in Northern Nigeria as an example of private-sector participation in the development of inland logistics infrastructure.

ALSO READ: INVESTIGATION: Ganduje embroiled in multi-billion naira Kano dry port ownership scandal

Mr Dantsoho assured stakeholders that efforts to optimise the inland port system were underway and confirmed plans to visit the Dala and Funtua facilities to assess their operational conditions and infrastructure requirements.

Operational oversight

Speaking on behalf of the delegation, Hassan Bello welcomed the transfer of operational oversight to the NPA, expressing appreciation for what he described as a seamless transition.

Mr Bello referenced the gazetted Port Act, which recognises inland dry ports as official ports of origin and destination, while drawing attention to challenges confronting the facilities, particularly inadequate rail connectivity and broader logistics constraints.

Rail access is a critical component of inland dry port operations, as efficient connections to the national rail network can facilitate cargo movement between seaports and inland destinations, potentially reducing pressure on road transport and lowering logistics costs.

The meeting also established a framework for further technical consultations, infrastructure integration and physical planning to identify the requirements for improving operations at the facilities.

The discussions highlighted the need for detailed technical assessments, stakeholder coordination and physical inspections to establish infrastructure priorities and guide subsequent project development.

The planned visits to Dala and Funtua inland dry ports are expected to provide NPA with a clearer understanding of the facilities’ operational challenges and the interventions required to strengthen their roles in cargo distribution, trade facilitation and wider maritime logistics network.


Discover more from Premium Times Nigeria

Subscribe to get the latest posts sent to your email.

Continue Reading

Trending