Frequency
2
occurrences
First Seen
September 1, 2026
Last Seen
September 1, 2026
Related Threat Clusters
-
API Key Theft at METR Costs $600,000 in AI Credits
METR disclosed two significant security incidents involving unauthorized access attempts to its systems. In March 2026, attackers stole an API key for public models, leading to the consumption of approximately $600,000…
2 articles · Updated September 1, 2026
Recent Intelligence Reports
- 2026 08 31 Security Update — metr.org · September 1, 2026
- Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 — Thehackernews · September 1, 2026
Related Entities
Credential Stuffing
Phishing
CWE-200 - Exposure of Sensitive Information
CWE-287 - Improper Authentication
T1021 - Remote Services
T1046 - Network Service Discovery
T1078 - Valid Accounts
T1098.004 - SSH Authorized Keys
T1098 - Account Manipulation
T1110 - Brute Force
T1566 - Phishing
Google Authentication