Infostealer Malware

Infostealer malware is a category of malicious software designed to extract sensitive data from infected systems, including credentials, authentication tokens, browsing history, and financial information. For AI governance and compliance, this threat is particularly significant because it can compromise access to AI systems, steal training data, or exfiltrate proprietary models and algorithms. Organizations implementing AI governance frameworks must address infostealer risks through endpoint security controls, data protection measures, and incident response procedures to safeguard AI assets and maintain regulatory compliance.

1 item

Corporate PolicyGlobal2026-08-30

Infostealer Malware Bypasses MFA to Hijack Claude Accounts

Anthropic has disclosed that infostealer malware families including Vidar, LummaC2, StealC, RedLine, and Atomic Stealer are stealing authenticated browser session tokens to access Claude accounts without requiring passwords or multi-factor authentication. The company is revoking compromised sessions, removing saved payment methods, and issuing refunds for unauthorized charges it can identify. Enterprise compliance teams face a post-authentication access risk that standard AI platform credential controls do not address.

Claude Anthropic session hijacking infostealer malware account security AI API credentials access controls incident response