One Operator, Two AI Agents: Stolen LLM Keys and Fake US Students
SOCRadar says a Chinese-speaking operator it calls leepsmarts used AI agents to harvest 2,233 LLM API keys from exposed config files, create fake student accounts at US universities and stage a cPanel exploit against three schools.