Bad Actors are scamming tokens off of AI compute providers

Bad Actors are scamming tokens off of AI compute providers.

Stripe is seeing a pattern emerge for businesses that charge by the token.

In a recent post Stripe made, they outlined a new form of fraud. Well... kind of new.

According to the post, “one in six attempted sign-ups is made by a bad actor, and free trial abuse has more than doubled in the past six months.”

That is wild to think about. One in six? You also have to wonder about how many they missed as well.

Using their tool, Stripe Radar, they claimed to have “blocked more than 3.3 million risky sign-ups in the last month alone”.

Now, the really interesting(possibly scary) question to ponder is, what are they doing with the stolen token credits?

Likely, they are using them to run AI-powered scams against your grandmother.

This world is getting weirder by the day. What a time to be alive.

What can you do?

Keep a close eye out for users abusing your free tier if you have one.

Run a tight ship as it comes to your cloud infrastructure. Don’t let your keys get compromised.

If you want some help sharpening you and your team’s infosec skills on AWS, you should check out my On Demand Video Course on O'Reilly - Zero to Hero on AWS Security: An Animated Guide to Security in the Cloud