Bitsight: "MONST3R-AI" Underground Pentest Agent Runs on Buyers' Stolen AI API Keys

Owners of stolen OpenAI, Anthropic, and Google API keys, and the hosts scanned with them

Bitsight reported a criminal-forum platform where buyers paste stolen provider keys, set a budget cap, and point an autonomous agent at a target list, so the key owner pays for the scans. The seller hosts no model and claims 1,072 findings across 199 hosts (unverified). A reseller, CloseRouter, advertised GLM at $0.053 per million input tokens against $1.12 officially. Other forum posts showed an agent using IDA Pro to find a buffer overflow and a browser-automation agent breaching an enterprise Notion account. Single source

Stolen AI provider keys act as both payment and compute for offensive agents, with no binding of key to owner's intended use