Verified65% confidenceFactExact time
Attackers can exploit stolen AI service account credentials to call API interfaces for computing power theft, and such behavior has frequently appeared in terms-of-service violation reports on platforms such as OpenAI and Anthropic.
3
Sources
65%
Confidence
Long-term
Relevance
7/10/2026
First Seen
Sources
Beware the Gemini Free Membership Scam: The Account Security Risks of Leaked Backup Codes
bilibiliOpenclaw安装7/5/2026
Related Claims
UnverifiedUsing local proxy tools to take over AI IDE traffic carries security risks including plaintext storage and leakage of API keys, code data privacy being logged and uploaded, and man-in-the-middle attacks80% similarUnverifiedIn several recent AI agent hacking incidents, the agents did not "escape" the sandbox; rather, within their authorized scope they combined malicious sequences and used legitimate permissions to carry out illegal operations.75% similarUnverifiedThird-party tools that claim to 'bypass OpenAI account verification' often imply circumventing normal authorization, and may steal API quota, crack software, or plant malicious programs.74% similarUnverifiedWhen AI services charge by usage, hackers target the theft of computing resources rather than data, which is fundamentally different from traditional account theft.74% similarUnverifiedNormal Security披露的GitLost研究指出，当AI编程代理能访问多个仓库时，一条公开issue可能成为数据泄露入口74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/462836API
curl https://kongchang.com/api/v1/knowledge/claims/462836MCP
get_claim(id=462836)