How fraudulent AWS accounts feed a Claude distillation market: reverse-engineering Kiro-account-manager
In Chinese Telegram channels, Claude access is being sold at a 94% discount off the official price. These discounted APIs are advertised for model distillation. Behind those low prices is a supply chain of fraudulently created accounts.
The author found one of the tools that create those accounts, and reverse-engineered it. Kiro-account-manager mass-creates free AWS Builder ID accounts, which come with access to Anthropic's Claude through Amazon's Kiro IDE.
The full write-up below breaks down how the tool works, how it tries to fake anti-bot fingerprints, and how defenders can catch it.
How fraudulent AWS accounts feed a Claude distillation market: reverse-engineering Kiro-account-manager
In Chinese Telegram channels, Claude access is being sold at a 94% discount off the official price. These discounted APIs are advertised for model distillation. Behind those low prices is a supply chain of fraudulently created accounts.
The author found one of the tools that create those accounts, and reverse-engineered it. Kiro-account-manager mass-creates free AWS Builder ID accounts, which come with access to Anthropic's Claude through Amazon's Kiro IDE.
The full write-up below breaks down how the tool works, how it tries to fake anti-bot fingerprints, and how defenders can catch it.