Loading threat actor…
SilverInc is a criminal access-resale operation associated with the monetization phase of the Bizarre Bazaar LLMjacking ecosystem. It has been linked to a broader supply chain in which separate actors scan the internet for exposed or weakly authenticated large language model and Model Context Protocol endpoints, validate access, and then resell that access through commercial channels. SilverInc markets access via Telegram and Discord and promotes a related offering called NeXeonAI, advertised as a unified AI infrastructure service aggregating access to numerous AI models. The operation targets misconfigured self-hosted LLM deployments, exposed OpenAI-compatible APIs, unauthenticated Ollama instances, publicly reachable MCP servers, and other internet-accessible AI environments. Activity associated with this ecosystem has included unauthorized use of AI compute for cryptocurrency mining, resale of compromised API access, exfiltration of prompts and conversation data, and attempts to pivot into internal systems through MCP-connected resources. The broader operation has also been associated with the aliases Hecker, Sakuya, and LiveGamer101. SilverInc is best characterized as a financially motivated cybercriminal service facilitating unauthorized access to AI infrastructure rather than a nation-state actor. Its role centers on commercialization of illicit access and downstream abuse of compromised AI services.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.