[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiWw7V0FCvLT75FE74nPH0UxIhtSXaODQTt8yMD5xLD8":3},{"article":4,"iocs":54,"watch_terms":72,"solutions":73,"lesson":164},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"0e94d71f-8fe1-4030-b44b-0be5ecf71104","Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt","poison-claude-sells-discounted-claude-access-while-its-operator-sees-every-custo-45c69e","Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access to artificial intelligence (AI) models on underground cybercrime forums and messaging platforms. One such service, Poison Claude, claims to offer access to Anthropic's large language models (LLMs), including Opus 4.8, Opus 4.7, Opus 4.6, and Sonnet 4.6. \"Advertisements for Poison Claude","Cybersecurity researchers have identified several underground services offering illicit access to AI models, including Anthropic's Claude. One such service, Poison Claude, leverages free bonus credits and charges a fraction of the official price, accepting cryptocurrency payments. A configuration error exposed an API status endpoint, revealing over 800 users, though this has since been fixed. The service provider has full visibility into customer prompts, posing a significant privacy risk.","Illegal AI model access services like Poison Claude are selling discounted access while exposing customer prompts.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fpoison-claude-sells-discounted-claude.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhp3V9f5UsiH1E6dHfRvy0DEOYvcK14BatMbbLVfdPjLbu3PMInRmVXDi4xoGw-pSIuxUjZS1rdv4X7N1V9xRoV9RRVfaYdAWI6OTxKZzOhAlHYh6dKZNeAWCPkaPdGAvwgcOwFQ0atoRBUxKfE_KfhJpnm1yV1tXr5_Wv2yqND0vZCMMEfRB0V220SZbne\u002Fs1600\u002Fai-access.jpg","2026-08-05T15:36:03+00:00","2026-08-05T18:00:18.003694+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Claude","product",{"name":21,"type":22},"Anthropic","vendor",{"name":24,"type":19},"Opus 4.8",{"name":26,"type":19},"Opus 4.7",{"name":28,"type":19},"Opus 4.6",{"name":30,"type":19},"Sonnet 4.6","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":31,"icon":33,"name":34,"slug":35},null,"AI Security","ai-security",[37,42,44,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,59,62,65,68,70],{"type":56,"value":57,"context":58},"domain","api.claudeopus[.]shop","Exposed API status endpoint for Poison Claude",{"type":56,"value":60,"context":61},"poison-claude.bitsender[.]top","Main domain for Poison Claude",{"type":56,"value":63,"context":64},"Ecomagent.in","Similar gray market service offering discounted AI model access",{"type":56,"value":66,"context":67},"dakaka[.]org","Disposable domain used for synthetic identity creation",{"type":56,"value":69,"context":67},"emailinbo[.]live",{"type":56,"value":71,"context":67},"ratixq[.]com",[21,18,24],{"controls":74,"vendors":157},[75,104,129],{"slug":76,"name":77,"problem":78,"products":79},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[80,88,96],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"slug":53,"name":105,"problem":106,"products":107},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[108,116,121],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":117,"product_name":118,"url":119,"description":120},"agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"slug":35,"name":130,"problem":131,"products":132},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[133,141,149],{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":142,"vendor_name":143,"vendor_logo":144,"product_slug":145,"product_name":146,"url":147,"description":148},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":150,"vendor_name":151,"vendor_logo":152,"product_slug":153,"product_name":154,"url":155,"description":156},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",[158],{"slug":159,"name":160,"logo_path":161,"roles":162},"okta","Okta","\u002Fvendor-logos\u002Fokta.png",[163],"reported_by",{"slug":165,"title":166,"body":167,"framework_refs":168,"framework_notes":178},"illicit-claude-api-reseller-exposes-users-and-their-prompts-via-misconfigured-endpoint","Illicit Claude API Reseller Exposes Users and Their Prompts via Misconfigured Endpoint","Poison Claude and similar underground services exploit stolen or misused API credentials to resell AI model access at steep discounts, attracting users who unknowingly surrender full visibility of their prompts to a malicious third party. A configuration error left an API status endpoint publicly accessible, leaking data on over 800 users before it was patched. This matters because users interacting with unofficial AI proxies have no assurance of data confidentiality — every query, including sensitive business or personal information, is exposed to the service operator. Beyond privacy risks, using such services may violate terms of service and expose organizations to legal and compliance liability. It underscores the danger of prioritizing cost savings over verified, trustworthy service providers.",[169,170,171,172,173,174,175,176,177],"CIS Control 3: Data Protection","CIS Control 5: Account Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 AC-20: Use of External Information Systems","NIST SP 800-53 SA-9: External Information System Services","NIST SP 800-53 SI-12: Information Management and Retention","GDPR Article 28: Processor obligations and sub-processors","GDPR Article 32: Security of processing","NIST AI RMF: GOVERN 1.1 – Policies and procedures for AI risk management",{"CIS Control 3: Data Protection":179,"CIS Control 5: Account Management":180,"GDPR Article 32: Security of processing":181,"CIS Control 12: Network Infrastructure Management":182,"GDPR Article 28: Processor obligations and sub-processors":183,"NIST SP 800-53 AC-20: Use of External Information Systems":184,"NIST SP 800-53 SA-9: External Information System Services":185,"NIST SP 800-53 SI-12: Information Management and Retention":186,"NIST AI RMF: GOVERN 1.1 – Policies and procedures for AI risk management":187},"Data protection means not sending sensitive prompts to unvetted third parties such as discount AI resellers.","Account management covers protecting API credentials so they cannot be stolen and resold by services like Poison Claude.","Requires appropriate security of processing, which the reseller's exposed endpoint plainly lacked.","Network configuration control would have stopped the reseller's status endpoint being publicly exposed.","Processors must be bound by contract, which no unofficial reseller handling users' prompts would provide.","Controls the use of external systems, so staff do not route work through unauthorised AI resellers.","Requires vetting external services before use, which would rule out unofficial resellers that see every prompt.","Information management means knowing where data goes, and resellers can retain and misuse users' prompts.","Policies for AI use would steer staff to approved AI providers rather than cheap illicit resellers."]