Stolen AI API keys are paying for hackers’ autonomous scans

A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans, according to Bitsight research reported by Help Net Security. Bitsight tracked thousands of posts across 16 underground forums from February through August 2026 and found mentions of AI agents, indirect prompt injection and the Model Context Protocol rose 67 percent.