سجل تدقيق مستقل يربط نتيجة البحث بالأدلة والتناقضات وحالة الالتزام والـReadback والمتابعة دون استنتاج حالة غير مسجلة.
Canonical Run ID
ACRIP-XCORR-20261102-B0C70C26
ناجح · PASS
What ran?CROSS_DOMAIN_CORRELATION
Preserve, revalidate and canonicalize all four Black October research rounds; resolve platform-secret, AI-security, supply-chain and threat-infrastructure deltas without collapsing distinct incident identities.
Why this Topic?Black October AI Credential Economy & Platform-Chain Abuse
Created ecosystem-level Black October AI Credential Economy topic; added 3 evidence + 4 hypotheses + 4 gaps; deduped existing incidents; preserved single-actor attribution as LOW/unproven.
EVIDENCE
الأدلة وما تثبته
3 سجل
AIS-E-B0C70C26-01
Anthropic documents stolen AI API keys/session tokens as targets, loot and attack compute; GTG-50020 caused an AI vendor sandbox to disclose production keys, switched workloads to stolen keys and then targeted roughly 30 AI companies in about four days.
UNKNOWN
Supports
Operational archetype proving stolen AI access can become attack compute and criminal-supply-chain commodity.
Does not prove
GTG-50020 identity behind Black October or universal AI-driven efficacy uplift.
Cross-source revalidation confirms a concentrated October wave against AI developer platforms with repeated environment-variable/API-credential targeting; tracked downstream Bedrock abuse reached ~2.5M calls and >$100k list-price usage in two cases.
UNKNOWN
Supports
Ecosystem-level credential targeting, monetization and downstream LLMJacking/resale.
CONTRADICTIONS
التناقضات والقيود
لا توجد تناقضات مسجلة لهذه الجولة.
UNCERTAINTY
الفجوات غير المحسومة
{"Notes":"Primary ecosystem denominator/root-cause gap.","Gap ID":"CSS-GAP-B0C70C26-01","Impact":"Blocks single-campaign attribution, prevalence estimates and complete market sizing.","Status":"OPEN","Gap Type":"PLATFORM_ROOT_CAUSE_AND_MARKET_DENOMINATOR","Priority":"HIGH","Domain ID":"CY-DOM-005","Topic IDs":"CY-TOP-CSS-B0C70C26","Description":"No authoritative cross-vendor root-cause map or denominator exists for compromised AI credentials, brokers/resellers, downstream buyers, realized spend or actor overlap.","Last Reviewed":"2026-11-02","Resolution Run":"ACRIP-XCORR-20261102-B0C70C26","Required Evidence / Resolution":"Final vendor RCAs; provider token telemetry; credential lineage; broker/reseller control evidence; normalized victim/key/spend denominator."}
{"Notes":"Preserve role separation.","Gap ID":"CY-GAP-AIS-B0C70C26-01","Impact":"Blocks actor-level criminal-supply-chain mapping.","Status":"OPEN","Gap Type":"STOLEN_COMPUTE_OPERATOR_LINEAGE","Priority":"HIGH","Domain ID":"CY-DOM-006","Topic IDs":"CY-TOP-CSS-B0C70C26","Description":"Initial-access actors, validators, brokers, resellers and final AI-compute consumers are not resolved as same vs separate entities.","Last Reviewed":"2026-11-02","Resolution Run":"ACRIP-XCORR-20261102-B0C70C26","Required Evidence / Resolution":"Credential issue/use telemetry, broker/payment accounts, infrastructure control, tool fingerprints and authoritative attribution."}
FOLLOW-UP
المتابعات غير المحسومة
4 مفتوحة
PLATFORM_ROOT_CAUSE_AND_MARKET_DENOMINATOR
No authoritative cross-vendor root-cause map or denominator exists for compromised AI credentials, brokers/resellers, downstream buyers, realized spend or actor overlap.
OPEN
Priority: HIGH · Created: ٠٣/١١/٢٠٢٦، ١:١٣ م
STOLEN_COMPUTE_OPERATOR_LINEAGE
Initial-access actors, validators, brokers, resellers and final AI-compute consumers are not resolved as same vs separate entities.
OPEN
Priority: HIGH · Created: ٠٣/١١/٢٠٢٦، ١:١٣ م
SHARED_UPSTREAM_ACCESS_LINEAGE
No public evidence establishes a shared upstream credential compromise, publisher account, build system, dependency or release authority linking distinct SCSE incidents to AI-platform intrusions.
OPEN
Priority: MEDIUM-HIGH · Created: ٠٣/١١/٢٠٢٦، ١:١٣ م
INFRASTRUCTURE_CONTROL_AND_ACTOR_CROSSWALK
Ownership/control and operator identity for momo/Xingjiabi/validator nodes, proxy pools and original platform intrusions are not resolved for single-campaign attribution.
OPEN
Priority: HIGH · Created: ٠٣/١١/٢٠٢٦، ١:١٣ م
AUDIT TIMELINE
السجل الزمني الكامل
0 حدث
لا توجد run_events تاريخية لهذه الجولة؛ تُعرض حالات Lifecycle أعلاه كما هي من سجل Run ولا يتم اختلاق أحداث بديلة.
One actor, one exploit, one vulnerability or identical initial-access chain across all vendors.
Confidence
غير مسجل
Context
AI developer platforms / secret custody / AI-provider credentials
Wiz Researchفتح المصدرCY-T2 / Primary Cloud Security Research
TAI-E-B0C70C26-01
Wiz observed 23.106.46.239, 38.246.114.118, 104.243.32.50 and 31.57.201.201 testing stolen keys; linked the first to momo/LLM resale and the second to Xingjiabi. Zeabur independently lists 23.106.46.239 in incident activity and 31.57.201.201 in earlier root sign-ins while leaving the September→October relation unconfirmed.
UNKNOWN
Supports
Infrastructure relation to credential validation/resale and subset incident telemetry.
Does not prove
That the IPs performed every initial compromise, or that same infrastructure implies same human/operator.
Confidence
غير مسجل
Context
AI credential validators / LLM resale infrastructure / proxy-hosting pools
Wiz Researchفتح المصدرCY-T2 / Primary Cloud Security Research
{"Notes":"Keep Cursor/LiteLLM/Gheist separate.","Gap ID":"CY-GAP-SCSE-B0C70C26-01","Impact":"Blocks safe campaign/actor merge across developer-ecosystem incidents.","Status":"OPEN","Gap Type":"SHARED_UPSTREAM_ACCESS_LINEAGE","Priority":"MEDIUM-HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-CSS-B0C70C26","Description":"No public evidence establishes a shared upstream credential compromise, publisher account, build system, dependency or release authority linking distinct SCSE incidents to AI-platform intrusions.","Last Reviewed":"2026-11-02","Resolution Run":"ACRIP-XCORR-20261102-B0C70C26","Required Evidence / Resolution":"Vendor RCAs, publisher/account logs, build provenance, token issue history, endpoint telemetry and actor-linked infrastructure."}
{"Notes":"same indicator/infrastructure/market/actor remain separate.","Gap ID":"CY-GAP-TAI-B0C70C26-01","Impact":"Blocks actor merge and durable ownership claims from static indicators.","Status":"OPEN","Gap Type":"INFRASTRUCTURE_CONTROL_AND_ACTOR_CROSSWALK","Priority":"HIGH","Domain ID":"CY-DOM-008","Topic IDs":"CY-TOP-CSS-B0C70C26","Description":"Ownership/control and operator identity for momo/Xingjiabi/validator nodes, proxy pools and original platform intrusions are not resolved for single-campaign attribution.","Last Reviewed":"2026-11-02","Resolution Run":"ACRIP-XCORR-20261102-B0C70C26","Required Evidence / Resolution":"Provider/hosting logs, passive DNS with control intervals, account/payment records, credential-use lineage, tool fingerprints and authoritative attribution."}
NEW — final saturation confirms an AI-credential economy and multi-actor/shared-market model with VERY HIGH confidence; single unified actor remains LOW/unproven. Existing vendor, LiteLLM, Cursor, Gheist, PHP2Shell and Binance topics remain separate.