Stolen AI credentials feed growing LLM proxy economy
Team Cymru estimates more than 80,000 proxy servers hide stolen AI credentials and enable model distillation.
74
Product
new-api
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 11, 2026
- Last mentionedSep 28, 2026
Timeline
2 articles · newest firstThe Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)
An autonomous coding agent harvested LLM API access from poorly secured gateways and aggregated stolen inference capacity behind a self-hosted gateway
68
Appears with
- Amazon Web Servicesvendor · 1
- OpenRoutervendor · 1
- xAIvendor · 1
- Palo Alto Networksorganization · 1
- Team Cymruorganization · 1
- Qwenai model · 1
- Cobaltorganization · 1
- CISAorganization · 1
- claude-opus-5ai model · 1
- Doubaoai model · 1
- gpt-5.6-solai model · 1
- DeepSeekai model · 1
- FBIorganization · 1
- Zhipuai model · 1
- Claude Relay Serviceproduct · 1
- SANSvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.