# Single Cloud Compromise Can Lead to Exploitation of AI for Disturbing Chat Services! 🔒

**URL:** <https://onehack.st/t/single-cloud-compromise-can-lead-to-exploitation-of-ai-for-disturbing-chat-services/292832>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [October 5, 2024, 7:08pm UTC](https://onehack.st/t/single-cloud-compromise-can-lead-to-exploitation-of-ai-for-disturbing-chat-services/292832 "2024-10-05T19:08:17Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [October 5, 2024, 7:08pm UTC](https://onehack.st/t/single-cloud-compromise-can-lead-to-exploitation-of-ai-for-disturbing-chat-services/292832/1 "2024-10-05T19:08:17Z")

</div>

**Summary:**

1. **Cloud Credential Theft**  
Organizations losing access to their cloud credentials face a troubling trend where cybercriminals exploit these credentials to create and resell sexualized AI chat services.

2. **Illicit Chat Bots**  
These AI-powered chat bots often use custom jailbreaks to bypass content filters and engage in dark role-playing scenarios, including child sexual exploitation.

3. **Increase in Attacks**  
Researchers at **Permiso Security** noted a significant rise in attacks against generative AI infrastructure like **AWS Bedrock** , especially due to accidental exposure of credentials online.

4. **Lack of Visibility**  
Many AWS users do not enable logging (which is off by default), resulting in a lack of oversight regarding how attackers utilize stolen access.

5. **Test Case Demonstration**  
To illustrate the issue, Permiso researchers leaked a test AWS key on GitHub with logging enabled. Within minutes, the key was used to offer AI-powered sex chat services, revealing the alarming scale of misuse.

6. **High Volume of Requests**  
Over two days, the researchers recorded more than **75,000 successful interactions** with the AI models, predominantly involving sexual content, including references to child sexual abuse.

**Read more at:** [Krebs on Security](https://krebsonsecurity.com/2024/10/a-single-cloud-compromise-can-feed-an-army-of-ai-sex-bots/) | [Permiso Security Blog](https://permiso.io/blog/exploiting-hosted-models)