Agent Incident RegistryAIR
v1 · updated 19 Oct 2026
In the wild Realized harm

PRC-nexus clusters UNC6201/UNC5673 pooled stolen Gemini, Claude and OpenAI accounts via relay proxies

AIR-2026-0109 AIR record · 2026-05-gtig-llm-account-pooling
Open in dashboard About
A real party was affected. This incident caused actual consequences, not a demonstrated capability.
From the supporting source
they employ 'Claude-Relay-Service' to aggregate multiple Gemini, Claude, and OpenAI accounts, enabling account pooling and cost-sharingcloud.google.com
The record
Disclosed
2026-05-12
Vendor
multiple
Product
Claude-Relay-Service, CLI-Proxy-API fronting Gemini/Claude/OpenAI
Risk domain
Access control and permissions › Credential theft
Also touches
Policy drift
System type
Generative model
Who acted
Human acted on output (contested) — humans pooled stolen accounts through relay proxies
Attack surface
Agent framework
Autonomy level
Assistant
Initial vector
Account pooling via open source relay proxies
Impact type
Service abuse, Policy circumvention, Cost shifting
Confidence
High
Submitted by
EAI Internal
Crosswalk
OWASP Agentic Top 10 (2026)
ASI03 – Identity and Privilege Abuse
MITRE ATLAS
AML.T0012 – Valid Accounts
NIST AI RMF
MEASURE 2.7
EU AI Act
Article 13
ISO/IEC
TR 24028; 42001; 23894
AIUC-1
B. Security
Scope
tool failure
Mitigation
Use secure credential storage; Implement short-lived tokens.
Taxonomy
Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
Multiple pooled provider accounts across Google, Anthropic and OpenAI
Capability abused
api_key_relayingaccount_poolingpolicy_evasion
Taxonomy & references
OWASP ASI03 Identity and Privilege Abusellmjackingaccount_poolingattribution_evasion
Curator notes
The operational-security layer beneath most of the other records in this corpus: it is how actors keep using frontier agents after bans. Directly relevant to agent credential/token theft as a market.
Supporting sources
Cite as
Enkrypt AI. "PRC-nexus clusters UNC6201/UNC5673 pooled stolen Gemini, Claude and OpenAI accounts via relay proxies". AIR, AIR-2026-0109. https://agentincident.vercel.app/i/AIR-2026-0109/ (accessed 2026-10-19).