Anthropic Users Hit by Infostealer Attacks, Session Thefts
2026-09-01T02:51:35Z•cbe6b22e4866ccbbd2ef04c88c4076d418d0a07726f5e8cc9d3027c4d2a69ab4
CVE-2026-73570AI securityAndroid malwareClickFixHTTP request smugglingICSLLM poisoningOT securityPowerShelladversary-in-the-middleagentic AIbanking trojancloud securitycredential theftcyber espionageindustrial protocolsinfostealerinsider threatmalwaremodel compromisenation-statephishingransomware riskreverse tunnelrouter backdoorsession theft
What happened
Dark Reading coverage highlights active infostealer, phishing, malware, nation-state, OT, cloud, and AI-agent threats. Notable risks include session theft against Claude and Microsoft 365 users, PowerShell-based ClickFix campaigns with reverse tunnels, backdoored ZBT routers, Android malware targeting vehicle head units, AI-agent compromise and model poisoning, exploited Zimbra takeover vulnerability CVE-2026-73570, and industrial protocol weaknesses capable of disrupting physical processes.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- cbe6b22e4866ccbbd2ef04c88c4076d418d0a07726f5e8cc9d3027c4d2a69ab4
- Enrichment time
- 2026-09-01T02:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.