Okta

1 items · Attacks 1 · all entities

Okta documents gray-market services reselling frontier-model access — and reading every prompt that passes through

Okta's threat-intelligence team documented gray-market services, one branded 'Poison Claude' with roughly 881 users, that resell Anthropic and OpenAI model access at 5-15% of list price by pooling accounts created on abused AWS Bedrock free credits. Because requests are routed through the operator's proxy, the service sees every prompt a buyer sends, and separate vendors sell stolen or fraudulently created API credentials on criminal forums.

Reported by researchersOkta Threat Intelligence ↗ ·