Fraudulent Cloud Credits Fueling Gray-Market AI Access Reselling

• •Hackers are exploiting cloud startup credits to resell AI access cheaply.
• •Services like Poison Claude utilize fraudulent accounts to accumulate credits.
• •The gray-market AI access poses risks to legitimate users and cloud providers.

Threat actors are exploiting free cloud trials and startup credits to create gray-market AI proxy services. These services, such as Poison Claude, resell access to advanced AI models like Anthropic Claude and Google Gemini at discounted rates. The fraudulent accounts used to accumulate promotional credits are registered synthetically, allowing these services to operate at a lower cost. Okta Threat Intelligence has confirmed the existence of these operations, which pose risks to legitimate users and cloud providers. The impact is significant, as it undermines the integrity of cloud services and AI access. The situation is ongoing, with researchers actively monitoring the developments in this gray market.