Hackers Allegedly Selling VirusTotal API Keys on the Dark Web
An unverified dark-web listing offers a claimed VirusTotal Enterprise API key for $350 in Bitcoin or Litecoin.
A Dark Web Informer post on October 7 alleged that a seller was offering a VirusTotal Enterprise API key for $350, payable in Bitcoin or Litecoin with escrow. The advertisement claimed limits of 5,000 requests per day, 300,000 per hour, and one billion per month, figures that conflict with one another and with VirusTotal’s published quotas. The report does not identify an account owner or show the key is genuine, stolen, or active, and it does not evidence a compromise of VirusTotal itself. Organizations are advised to review API usage and revoke any exposed keys.
- An October 7 listing asks $350 for an alleged VirusTotal Enterprise API key.
- Advertised quotas conflict with each other and with VirusTotal’s documented limits.
- Nothing confirms the key is genuine, stolen, or still active.
- Misuse would be account credential abuse, not a confirmed VirusTotal platform breach.
- Vendors
- VirusTotal
- Products
- VirusTotal API
- Organizations
- VirusTotal
From the original article
2 min read at cybersecuritynews.com
A seller allegedly offered a VirusTotal Enterprise API key for $350 in an October 7 Dark Web Informer post, but the claim remains unverified, with no evidence confirming whether the key is genuine, stolen, or active. According to the post, the seller claims limits of 5,000 requests per day, 300,000 per hour, and one billion […]
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.