AI agents breached 395 organizations using credentials your IAM policy still treats as human

Telegram marketplaces are selling stolen AI credentials with 24/7 customer support and money-back guarantees. One vendor, calling itself Poison Claude, advertises access to Anthropic’s Opus 4.8, Opus 4.7, Opus 4.6, and Sonnet 4.6 models at a discount. Okta’s threat intelligence team flagged the listing on September 9 after analyzing a 7 GB infostealer dump released on a Telegram channel on August 2.