---
title: "Discussion on \"Hackers Are Draining Claude Subscribers' Tokens — And Victims Can't Even See What Happened\" | Hashnode"
description: "Discussion on \"Hackers Are Draining Claude Subscribers' Tokens — And Victims Can't Even See What Happened\". Infostealer malware is hijacking session cookies to drain paid Claude accounts of tokens — no password needed, and no way for victims to see what was used."
url: "https://hashnode.com/posts/hackers-are-draining-claude-subscribers-tokens-and-victims-cant-even-see-what-happened/6aaf8017d5014a9662997d4b"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Hackers Are Draining Claude Subscribers' Tokens — And Victims Can't Even See What Happened](https://blog.zyvop.com/hackers-are-draining-claude-subscribers-tokens-and-victims-cant-even-see-what-happened?utm_source=hashnode&utm_medium=feed)

Infostealer malware is hijacking session cookies to drain paid Claude accounts of tokens — no password needed, and no way for victims to see what was used.

Sep 20 · 6 min read · blog.zyvop.com  
Read the article

-   [#accountsecurity](https://hashnode.com/tag/accountsecurity)
-   [#anthropic](https://hashnode.com/tag/anthropic)
-   [#claude](https://hashnode.com/tag/claude)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#infostealermalware](https://hashnode.com/tag/infostealermalware)

## Written by

[ZyVOP](https://hashnode.com/@zyvop)

@zyvop · Delhi, India

  
[View profile](https://hashnode.com/@zyvop)

The Developer Publishing Hub

One platform to write, cross-post to Dev.to, Medium, WordPress, Hashnode, and Bluesky, and protect your SEO with canonical links. Zero paywalls and full content ownership.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.