Stolen Claude Cookies Bypass 2FA and SSO
๐กStolen Claude cookies can bypass 2FA and corporate SSO, exposing an overlooked AI-account governance gap.
โก 30-Second TL;DR
What Changed
Stolen Claude session cookies let attackers access accounts without revisiting the login page or triggering 2FA.
Why It Matters
The incident highlights a governance gap for AI accounts created outside enterprise SSO: administrators may have no central visibility or revocation capability. Developers and companies should treat browser session theft as a separate risk from password or MFA compromise, especially when Claude can access sensitive conversations or connected services.
What To Do Next
Immediately sign out all Claude sessions, remove saved payment methods, and audit connected apps on any device suspected of running an infostealer before re-authenticating.
Key Points
- โขStolen Claude session cookies let attackers access accounts without revisiting the login page or triggering 2FA.
- โขThe affected accounts were card-billed, self-serve accounts outside corporate identity-provider and admin-console control.
- โขAnthropic named Vidar, LummaC2, StealC, RedLine, Acreed, and Atomic Stealer as malware involved in the campaign.
- โขAnthropic detected abuse through unusual usage-meter activity, then invalidated sessions, removed payment methods, and issued refunds.
๐ง Deep Insight
Background and context from public sources โ not the original article. 6 sources cited.
๐ Enhanced Key Takeaways
- โขThe attack vector relies on the persistence of session tokens stored in local browser databases, which remain valid until explicitly revoked or expired, regardless of the user's 2FA status.
- โขVictims remain vulnerable to repeated account takeover even after password resets if the underlying infostealer malware is not removed from the local host machine.
- โขThe campaign demonstrates a shift in cybercriminal focus toward 'AI-as-a-Service' platforms to exploit high-value compute credits and proprietary data access.
- โขThe use of Atomic Stealer confirms that the campaign successfully targeted macOS users in addition to the more common Windows-based infostealer targets.
- โขThe vulnerability highlights a critical gap in current web authentication standards where session cookies are not cryptographically bound to the specific hardware or browser fingerprint of the original session.
๐ Competitor Analysisโธ Show
| Feature | Anthropic (Claude) | OpenAI (ChatGPT) | Google (Gemini) |
|---|---|---|---|
| Session Security | Cookie-based (vulnerable) | Cookie-based (vulnerable) | Cookie-based (vulnerable) |
| Enterprise SSO | Supported | Supported | Supported |
| Malware Targeting | High (Infostealers) | High (Infostealers) | High (Infostealers) |
| Billing Model | Self-serve/Enterprise | Self-serve/Enterprise | Self-serve/Enterprise |
๐ ๏ธ Technical Deep Dive
- Attackers utilize infostealer malware to scrape the browser's local storage and SQLite databases (e.g., Cookies, Web Data) where session identifiers are stored.
- The exploit bypasses 2FA by replaying the 'session_id' or 'auth_token' cookie in the HTTP header of a new request, tricking the server into believing the request originates from an already authenticated session.
- The attack operates at the application layer, rendering transport-layer security (TLS) and standard login-page 2FA ineffective because the authentication handshake has already been completed.
- Malware families identified (Vidar, LummaC2, etc.) utilize C2 (Command and Control) infrastructure to exfiltrate stolen browser profiles, including saved credentials and session cookies, to remote servers.
๐ฎ Future ImplicationsAI analysis grounded in cited sources
โณ Timeline
๐ Sources (6)
Factual claims are grounded in the sources below. Forward-looking analysis is AI-generated interpretation.
Weekly AI Recap
Read this week's curated digest of top AI events โ
๐Related Updates
AI-curated news aggregator. All content rights belong to original publishers.
Original source: VentureBeat โ
This is a summary, not the original. Read the source, or get the weekly briefing.
Weekly AI briefing
One email a week. Unsubscribe anytime.