token-theft

Hackers are stealing Claude tokens from subscribers through infostealers, leading to unauthorized usage and prompting Anthropic to invalidate compromised sessions and issue refunds.

Vercel details the growing threat of AI inference theft, where attackers steal and resell API tokens, and explains how their BotID system can be used to verify every AI request to prevent abuse.

A hacker deployed a malicious dead-man's switch that wipes a victim's computer if the stolen GitHub token is revoked.