AI accounts and API keys for platforms like ChatGPT and Claude are being bought, sold, and bundled on underground markets and Telegram, enabling easier access and abuse by threat actors. This black market access fuels large-scale fraud, automated social engineering, and synthetic impersonation, prompting recommendations for stronger protections and monitoring. #ChatGPT #Claude
Keypoints
- Underground markets resell premium AI accounts, API keys, and bundled services at discounted prices.
- Acquisition methods include exposed keys, credential theft, bulk account creation, trial abuse, and resale of shared subscriptions.
- Threat actors leverage AI for scalable phishing, personalized social engineering, automation, coding, and synthetic media for impersonation.
- Listings often promise “no limits” or unrestricted access and are sold alongside RDPs, VPSs, and email accounts.
- Mitigations include enforcing MFA, monitoring login behavior and underground channels, rotating and securing API keys, using enterprise accounts, and training employees.
Read More: https://www.bleepingcomputer.com/news/security/paid-ai-accounts-are-now-a-hot-underground-commodity/