黑客窃取Claude订阅用户的token，Anthropic用户遭遇盗用

AI 摘要

英国独立AI顾问Grant de Swardt发现其Claude Max订阅的token使用量异常增加，经调查确认是黑客通过窃取的会话密钥生成未授权的OAuth令牌，盗用其账户资源。Anthropic虽暂停账户并退款，但未提供详细使用明细，导致用户难以防范。多位用户在Reddit和GitHub上报告类似遭遇，部分用户因此转向Cursor等其他AI工具。

正文节选

On August 4, Grant de Swardt, an independent AI consultant in East Sussex, UK, noticed something strange going on with his Claude Max 20x account. He hadn’t been working that day, yet his token usage was climbing. The next day, he disabled everything he had attached to Claude and did not work with it. Token consumption again increased. “In the clearest controlled interval, it increased from 45% to 55% while I performed no work, scheduled Cowork tasks were paused or completed, Dispatch/cloud exec

发布时间：2026-09-09 05:10

抓取时间：2026-09-09 05:21

来源机构：TechCrunch