Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Poison Claude advertises discounted access to Anthropic's Opus 4.8, 4.7, 4.6, and Sonnet 4.6 on cybercrime forums and messaging platforms at 5-15% of official per-token prices, accepting cryptocurrency payments
- Okta researchers Jeremy Kirk and Mathew Woodyard found the service exploits free bonus credits like AWS Bedrock's $100 credit, pooling accounts and routing customer requests through them while the user is charged 5-15% of the official price
- A configuration error exposed Poison Claude's API endpoint at api.claudeopus[.]shop/api/status, revealing 881 total users and 872 active users before being fixed after responsible disclosure
- As a gateway proxy, the operator sees every customer prompt — Okta warned the service provider could 'accidentally leak or sell data' since prompts must be forwarded to Anthropic to function
- Cloudflare placed a phishing warning on Poison Claude's main domain (poison-claude.bitsender[.]top) but declined to take action on the API domain, which uses Cloudflare Turnstile for bot protection
- Similar service Ecomagent.in has roughly 970 users and offers discounted access to both Anthropic's Opus 4.8, 4.6, Sonnet 4.6 and OpenAI's GPT Codex 5.5 via a custom API endpoint
Why it matters: The 881 users routing prompts through Poison Claude handed the operator full visibility into every query — a data exfiltration pipeline disguised as a discount service. It also reframes Anthropic's 'industrial-scale extraction' problem: it's not just state actors, but gray-market resellers monetizing stolen cloud credits at 85-95% off.
Ask SkimNews
