Rising Concern: Chinese-Speaking Threat Actor Exploits AI APIs for Credential Theft
Recent findings from Gambit Security have brought to light a significant threat within the cybersecurity landscape. Researchers have identified a Chinese-speaking cybercriminal who has been actively validating an extensive list of credentials pilfered from 1,742 different hosts. This alarming activity has seen the validation of 2,975 stolen credentials, leading to the upload of working keys to an AI application programming interface (API) reselling gateway.
Among the staggering array of credentials harvested, the criminal has successfully obtained 448 Gemini keys, 254 OpenAI keys, and 176 Anthropic keys. The trove of stolen data further includes credentials for not only well-known platforms but also for Groq, OpenRouter, xAI, and Amazon Web Services (AWS). These organizations represent critical sectors within the tech industry, and the theft of such credentials poses a significant risk to their security infrastructures.
The Emergence of a Commercial Relay Ecosystem
This incident has unveiled a broader and more concerning trend: the emergence of a commercial relay ecosystem, where stolen credentials are not merely a means to gain unauthorized access but are being monetized in sophisticated ways. Team Cymru, a cybersecurity organization, has conducted initial scans that suggest the use of several relay packages in this illicit trade. The most frequently detected packages were identified as CSR and sub2api. These packages have been published on GitHub by a developer known as Wei-Shaw, indicating a troubling blend of open-source technology with cybercrimes.
The sub2api platform, in particular, has been designed with user management features, enabling per-user billing, subscription-to-API conversion, model routing, and prompt auditing. This indicates a level of complexity and functionality that raises significant concerns about the professionalism and organization behind these cybercriminal activities. The sub2api project alone has been forked more than 8,000 times, suggesting a high level of interest and potential usage among various actors in the threat landscape.
The implications of such a platform extend beyond simple credential theft. The fact that the Telegram channel associated with sub2api boasts nearly 7,000 subscribers points to a community that is not only engaged but also likely sharing tactics, strategies, and possibly even additional stolen resources. This could lead to more sophisticated attacks as criminals collaborate and innovate together.
Moreover, sub2api’s GitHub page lists 26 commercial sponsors, including 15 organizations involved in API relay reselling. This sponsorship indicates a market demand for these types of services, suggesting that the commodification of stolen credentials is not just a rogue activity but has turned into a viable business model supporting a criminal ecosystem. Alongside these sponsors, the platform has attracted residential proxy vendors, AI account providers, a content delivery network optimized for relay traffic, and even a media-generation API service, illustrating a diverse range of business interests converging on this illicit market.
The Broader Implications for Cybersecurity
The emergence of such a commercial relay environment poses formidable challenges for cybersecurity professionals and organizations everywhere. As these platforms gain traction and sophistication, they complicate the defense against credential misuse and unauthorized access. The monetization of stolen keys not only incentivizes cybercriminals but also increases the scale and frequency of their attacks.
Efforts to counteract these threats will require concentrated collaboration among cybersecurity entities, law enforcement, and policymakers. As the boundaries blur between legitimate technology use and cybercriminal exploitation, the need for robust, adaptive cybersecurity measures becomes more crucial. Organizations must not only invest in technology but also prioritize awareness and training to ensure their employees understand the importance of safeguarding sensitive credentials and responding to potential threats effectively.
While the actions of this Chinese-speaking threat actor serve as a wake-up call, they also spotlight a rapidly evolving landscape of cybercrime. Organizations must remain vigilant and proactive to mitigate the risks posed by this new era of credential theft and exploitation.