Factory says attackers pooled free AI-service trials behind a proxy system and resold or reused the resulting model access. In its incident account, the company describes detecting accounts whose requests resembled legitimate traffic but lacked signals normally produced by its application.
Factory says it used Droid to build classifiers and automated account blocking, after which its internal measure of fraudulent model consumption fell roughly 95%. The account illustrates how trial abuse can become an infrastructure operation spanning multiple providers. The reduction is Factory's reported result, with no independent audit supplied.
Terms in this piece · Glossary
LLM — A large language model — the neural network behind tools like Claude and ChatGPT, trained on huge amounts of text to predict what comes next.
