Poison Claude Resold Anthropic Access Through Fraudulent Cloud Accounts

Researchers reported that Poison Claude, a gray-market service, sold heavily discounted access to Anthropic’s Claude models by routing customer requests through fraudulently created cloud and AI-provider accounts funded with free promotional credits. Okta Threat Intelligence said the service advertised unlimited or bundled token access at roughly 5% to 15% of official pricing, accepted cryptocurrency, and told users to redirect Claude Code or Anthropic-compatible API traffic to infrastructure controlled by the operator rather than Anthropic’s official endpoint. A misconfigured status page briefly exposed 881 total users and 872 active users, suggesting broad adoption, and investigators linked related infrastructure to a Hostinger server in Mumbai while the main domain remained behind Cloudflare.

Okta also identified a similar service, Ecomagent[.]in, which appeared to use Google Cloud startup credits and Vertex AI to provide discounted Anthropic model access, while Poison Claude was tied to pooled accounts using AWS Bedrock bonus credits. The activity was linked to wider automated account fraud against AI platforms, including large-scale fake sign-ups using VPNs and residential proxies, and researchers warned that customers of such proxy services risk prompt exposure, model substitution, and sudden service loss if upstream providers suspend the fraudulent accounts. Anthropic responded by strengthening identity verification and abuse detection, and Okta said it notified Cloudflare, Anthropic, AWS, and Google Cloud about the infrastructure and abuse patterns.