Man Sentenced for Using AI to Exploit Platform APIs and Steal Computing Resources
A man in Shanghai was sentenced to three years in prison with a three-year probation for using AI tools to automate account creation, bypass API security signatures, and steal computing resources from an AI aggregation platform to resell generation services. This case highlights the growing threat of AI-driven cybercrime and API abuse, serving as a significant cautionary tale for platform security and backend developers facing automated exploits. The defendant used AI to create a pool of nearly 300,000 free accounts, forge electronic signatures to bypass system defenses, and illegally invoke platform interfaces over 290,000 times, generating illegal gains of more than 34,000 yuan before being caught.
## BACKGROUND
An AI aggregation platform provides developers and users with centralized access to multiple large language models and media generation tools through unified APIs, handling billing and upstream computing costs. API signature verification is a security mechanism used to validate requests and ensure they haven't been tampered with in transit.