Hackers Abuse Cloud Startup Credits to Resell Claude and Gemini AI Access

Gbhackers •Divya • August 6, 2026

Threat actors are exploiting free cloud trials and startup credit programs to build gray-market AI proxy services. These services resell discounted access to advanced AI models, including Anthropic Claude and Google Gemini, according to Okta Threat Intelligence. These services rely on fraudulent or synthetic account registrations to accumulate promotional credits offered by cloud providers. The […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fraudulent Cloud Credits Fueling Gray-Market AI Access Reselling Threat actors are exploiting free cloud trials and startup credits to create gray-market AI proxy services. These services, such as Poison Claude, resell access to advanced AI models like Anthropic Claude and Google Gemini at discounted rates. The fraudulent accounts used to accumulate promotional credits are registered synthetically, allowing these services to operate at a lower cost. Okta Threat Intelligence has confirmed the existence of these operations, which pose risks to legitimate users and cloud providers. The impact is significant, as it undermines the integrity of cloud services and AI access. The situation is ongoing, with researchers actively monitoring the developments in this gray market. 2 sources 52

Hackers Abuse Cloud Startup Credits to Resell Claude and Gemini AI Access

The full story

Extracted Entities

MITRE ATT&CK (1)

Platforms (2)