最新资讯
reddit.com OpenAI 称 Astra 仅满足 10% 安全任务标准 dev.to FreeToken:在自有 GPU 上运行前沿 MoE 模型及其内存需求 dev.to 当 AI Agent 说“完成”时,究竟完成了什么? dev.to 部署 Underdog Bark 3.0 Pro:逐字转写、自定义后端与分块设置 dev.to 为艰难对话构建 AI:五个 Agent、一条安全正则与一位盲评监督者 techcrunch.com Palo Alto Networks 洽谈以 5 亿美元收购 AI Agent 安全初创公司 Clutch theinformation.com 黄仁勋被要求就涉华间谍指控向国会作简报 www.infoq.com Edera 推出 Object Capability Bounded Authority,试图将凭证与 AI Agent 工作负载隔离 wechat 这波杀疯了!旗舰级模型不限量、1个月视频额度免费领 bloomberg.com AI 抛售蔓延至信用市场,软银领跌亚洲美元债 dev.to 如何在专用 GPU 服务器上用 OpenAI 兼容 API 部署 LLM dev.to 审计 153 份 Claude Code 与 Codex 会话记录:User-Agent 与 URL 中的邮箱泄露
多元动态
登录 注册
大模型 www.aibase.com ·

Claude账号额度异常消耗?Anthropic确认遭黑客盗用

原文 我的收藏

多名Claude用户报告账号额度被异常消耗,Anthropic调查确认黑客通过恶意软件窃取登录会话,非法使用用户配额。案例包括英国顾问Grant D'Arcy,其账号被用于第三方服务,Anthropic已退款并撤销会话,但无法提供详细使用记录。

AI推荐理由 报道了Claude用户账号被黑客盗用的事件,涉及AI服务安全,具有实际警示意义。信息具体,包括用户案例和Anthropic的回应,来源为AIbase,可信度中等。

70

正文

Your Claude quota has vanished out of nowhere? Anthropic confirms the account was hacked AIbase基地 Published inAI News · 6 min read · Sep 9, 2026 9 Recently, several Claude users have reported on social platforms that their account quotas were rapidly being consumed without them using the service. According to Anthropic's investigation, hackers illegally accessed user accounts by stealing Claude login sessions through malware and secretly used their valuable call quotas. The incident was first noticed by Grant D'Arcy, an independent AI consultant in East Sussex, UK, on August 4th. That day, he wasn't working, but his Claude Max 20x account usage kept increasing. The next day, he immediately disabled all tools connected to Claude, paused scheduled tasks and cloud execution functions, and even when no Claude Code tasks were running locally, the usage still jumped from 45% to 55%. After communicating with Anthropic's customer service, the official acknowledged the abnormality in his account, then suspended the paid account, revoked all login sessions and server-side Claude Code tokens, and refunded £44.49 for the remaining subscription time. It is reported that the subscription price for Claude Max 20x is as high as $200 per month. The sudden suspension of the account directly impacted D'Arcy, who runs his own business. He relied on AI to help small and medium enterprises deploy intelligent agents to automatically extract purchase orders and input them into financial systems, and his daily administrative work, website design, and programming also heavily depended on this tool. After a thorough investigation, Anthropic informed D'Arcy that the attacker had used a leaked Claude session key to generate unauthorized Claude Code OAuth tokens. The company found that his account seemed to be used by a suspicious third-party service to handle other people's tasks, but they still couldn't determine how the attacker obtained access. TechCrunch, a tech media outlet, pointed out that since Anthropic's current customer service system can only view total usage, it cannot provide users with detailed itemized usage records, so such misuse might not be detected for months. As the incident spread on communities like Reddit and GitHub, more victims came to light. Some users reported that their accounts were automatically upgraded and charged without consent, with usage jumping from zero to 100% instantly; others said that they had sent just a few prompts and performed one web search, and the quota was nearly half consumed within 12 minutes; some even claimed to have been drained of their daily quotas after being idle for three consecutive days. Some users shared Anthropic's security reminder emails, which showed that the company recently discovered attackers were using common information-stealing malware to steal passwords, session data, and login credentials saved on users' computers. Anthropic stated that once suspicious activity is detected, they will force users to log out, revoke authorization, and refund as appropriate. They also reminded users to check if their devices were infected with such malware, which spreads through unofficial downloads or malicious ads. However, D'Arcy himself did not receive this security alert, and has not found any evidence of his computer being hacked yet. About two weeks after the account returned to normal, due to dissatisfaction with the slow handling progress and the lack of detailed usage details, D'Arcy eventually decided to cancel his subscription and switched to Cursor, which supports multi-model calls. Industry insiders believe that Anthropic still lacks necessary management tools to help users accurately identify the sources of quota consumption. In response to further questions from the media, Anthropic has chosen to remain silent. ClaudeAI new termsAnthropicBrand product terms This article is from AIbase Daily Scan to view Welcome to the [AI Daily] column! This is your daily guide to exploring the world of artificial intelligence. Every day, we present you with hot topics in the AI field, focusing on developers, helping you understand technical trends, and learning about innovative AI product applications. —— Created by the AIbase Daily Team © Copyright AIbase Base 2024, Click to View Source -

来源报道 · 1 篇 · 以下链接均前往原始媒体

← 返回精选动态 原文

更多内容