Topic
Misuse of commercial model APIs, including shared or resold credentials, proxy routing and output harvesting that breaches provider terms of service.
Anthropic says Moonshot AI routed 300,000 Kimi customer requests to Claude over ten days through 5,380 fraudulent proxy accounts in Singapore and Japan. That averages about 56 requests per account, light enough that teams selling model access have to link accounts to one another to see it.
Reality
Anthropic says six campaigns since February 2026 pulled reasoning transcripts out of Claude through proxy relays built on fictitious identities, stolen credit cards, and API keys harvested from legitimate companies and individuals.
Reality
Team Cymru has handed the relay IP addresses to the affected AI providers, but the count it confirmed grew roughly sevenfold while it was still scanning, and the software running on most of those hosts is a public GitHub project.
Reality
The joint advisory names six Chinese AI firms and tells providers to degrade suspect accounts without telling them. Its three detection signals also describe a lot of ordinary enterprise batch traffic.
Reality
The joint NSA, CISA and FBI advisory names six China-based companies and describes billions of tokens taken through paid APIs, cloud resellers and proxy transfer stations, which turns billing telemetry into a detection surface.
Reality