OpenCode Says AI-Driven Attack Stolen Credentials Triggered 50 Compute Charges
OpenCode co-founder Dax Raas said an AI-driven attack against the AI coding platform began on October 16 and required staff to remain on duty around the clock. The report says founder Colin Parsons received 50 charge notifications after credentials stored on OpenCode were used to purchase Anthropic and OpenAI compute services, while spam flooded the platform's Discord support channel every two seconds. The broader “Black October” framing and claims about the wider scale of AI-assisted attacks remain unconfirmed.
The reported incident shows how stolen platform credentials could be used to abuse paid AI compute services while also disrupting a developer platform's support channels.
This source is a digest of several news items (““黑色十月”席卷全球互联网，AI正彻底掀翻网络安全牌桌？”). Find this story in the original.