Claude and ChatGPT sessions sold for $5 on Telegram after infostealer theft
FlashPoint analyzed 44,791 stolen JWTs from a single infostealer log dump: 555 tokens belonged to AI services including Claude, ChatGPT, Gemini and Copilot, and 24 API keys were still valid. Anthropic warned affected users in September 2026 that session tokens were harvested from user machines and resold for LLMjacking.