Team Cymru: over 80,000 proxy servers hide stolen AI access

Team Cymru identified more than 80,000 proxy servers, called transfer stations, running the Claude Relay Service and sub2api platforms to mask traffic to frontier AI models. Some clusters trace to IPs in China and Hong Kong, pointing to model distillation and abuse of stolen API keys.

• Initial scan found 10,867 servers; estimate later grew past 80,000
• 17 relays to Anthropic's API uploaded 81 GB while receiving 1.4 GB
• Okta found 561 Anthropic session tokens on 5,871 infected machines
• One actor validated 2,975 stolen keys, including 448 Gemini keys