The Droid Wars: Breaking up an AI-orchestrated cyber fraud campaign
- Source
- factory.ai
- Author
- Factory
- Date
Context
A surge in apparently normal signups concealed large-scale trial abuse in Factory's account of an October 2025 incident. The company says it compared model-usage logs with product activity and found more than 20,000 organizations created over three days whose traffic lacked the usual signs of interaction with its client.
Factory then used its coding to help build classifiers and automated account enforcement, reporting roughly a 95% reduction in fraudulent model consumption. It also describes restoring access for legitimate users mistakenly flagged. The case shows the company's defensive approach: connect usage costs to application behavior, turn suspicious patterns into checks, and retain a correction path for mistaken blocks.
- AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
- LLM — A large language model — the neural network behind tools like Claude and ChatGPT, trained on huge amounts of text to predict what comes next.
Checking sign-in…
Loading comments…