Stolen AI API keys are paying for hackers’ autonomous scans
ID: 893109c7-40e5-525d-a20b-e20fb9642b2c
STIX ID: report--893109c7-40e5-525d-a20b-e20fb9642b2c
Feed Name: Help Net Security
Threat Score
Bitsight intelligence tracked underground forums and observed a growing criminal ecosystem that uses stolen AI provider API keys and open-weight models to run autonomous scanners and agents (MONST3R-AI), rising jailbreaking/abliteration activity, and a FakeGit campaign that distributed SmartLoader via thousands of fraudulent repositories; the report recommends scanning for exposed AI keys, verifying MCP servers and agent plugins, and blocking unapproved local agents and headless-browser automation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.