Anthropic says attackers used stolen Claude sessions to consume users' AI usage. Identified stealers include Vidar, LummaC2, StealC, RedLine, Acreed and Atomic Stealer (AMOS). The important part.. a stolen authenticated session can potentially be abused without the attacker knowing your password or repeating MFA. Anthropic has revoked affected sessions and removed saved payment methods and emailed affected users too