Nine AI developer platforms disclose October credential incidents
Original title: “Black October” for AI Developer Platforms
Wiz ties later Bedrock abuse of enterprise keys to vendor breaches, including about 800,000 and 1.7 million calls.
Wiz says at least nine AI developer platforms disclosed incidents in October, including Fireworks AI, Andromeda, Zeabur, Lightning AI, OpenCode, Railway, Warp, CommandCode and Northflank. Public reports point to stolen credentials and stored environment variables used for AI access, with no single shared vulnerability. Zeabur said it will shut down. Wiz describes two later cases of abused enterprise Bedrock keys that generated roughly 800,000 and 1.7 million calls before remediation.
Unconfirmed: Most incidents lack public technical detail; crypto losses and distillation or Chinese-lab links are claims, not confirmed facts.
- Fireworks, OpenCode and Warp reported signs of an “agent swarm” attack.
- OpenCode and CommandCode attributed incidents to an attempted distillation.
- Social posts allege about $371,000 in crypto stolen via Railway keys.
- One key made about 800,000 Bedrock calls over thirty hours.
- A second key made about 1.7 million calls over thirteen hours.
Impact: Stolen AI and crypto credentials abused for inference and alleged theft
- Products
- Amazon Bedrock
- Malware
- Mini-Shai Hulud
- Organizations
- WizCloud Security Alliance
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | artex.nhhh.de | ccount-pool management"). On October 8, 2026, a subdomain ( artex.nhhh.de ) resolving to 23.106.46.239 hosted a page with the title “ |
| domain | direct.465415.xyz | 6.239 in early 2026 and another site tied via passive dns ( direct.465415.xyz ), used the title "Moの自建网盘" ("Mo's self-built cloud drive") |
| domain | momo.skin | , the operator did have access to the stolen keys. The site momo.skin resolved to 23.106.46.239 in early 2026 and another site ti |
| domain | s3.xingjiabiapi.org | resale market for these keys. A subdomain of the main site, s3.xingjiabiapi.org resolved to 38.246.114.118 beginning on September 10, 2026. |
| ipv4 | 104.243.32.50 | 18 Checked permissions on several stolen keys 10/25 - 10/29 104.243.32.50 Checked permissions on several stolen keys 10/19 - 10/30 31 |
| ipv4 | 23.106.46.239 | mpromise?) Wiz Research identified an actor centered around 23.106.46.239 who appears to refer to themselves as “momo” who had access |
| ipv4 | 31.57.201.201 | 50 Checked permissions on several stolen keys 10/19 - 10/30 31.57.201.201 Identified using multiple stolen keys 10/18 - 10/25 The fol |
| ipv4 | 38.246.114.118 | els for discount prices. Infrastructure tied to this site ( 38.246.114.118 ) was identified conducting permission checks on the keys u |
From the original article
8 min read at wiz.io
A series of agentic attacks on AI Developer Platforms has been leading to LLMJacking at scale.
By Benjamin Read · wiz.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.