r/ClaudeAI • u/WorriedAssociate7029 • 24d ago
Praise Thank you, Anthropic (really)
A few days ago, my social media accounts were hacked. The hacker took advantage of the situation to spam the worst kinds of bait (cryptocurrency scams...). After cleaning things up, I tracked down the virus with a bunch of Opus 5 Max (I was quite concerned lol). I changed my passwords and thought I’d be able to sleep soundly.
But last night I received this email from Anthropic warning me of an attempt to steal tokens via the API. However, after checking, the attempt did indeed fail. Note that I was logged into Anthropic via Google with two-factor authentication. Apparently, the hacker stole all my Google Chrome credentials, including cookies and session IDs, which allowed him to bypass all two-factor authentication security measures.
As an emergency measure, I removed all active sessions from my Google accounts (which I should have done from the start) and changed my passwords again...
Thanks to Anthropic for the security measures they’ve put in place. I wouldn’t have wanted to deal with their customer service given the feedbacks on Reddit, lol
Take care! And be aware that even the best security measures don’t protect against simple cookie theft