Unverified50% confidenceFactExact time
Distillation-based model stealing attacks require only API access to initiate, with a threshold far lower than directly obtaining weight files.
1
Sources
50%
Confidence
Long-term
Relevance
9/20/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedEnabling dangerous-class access bypasses file isolation, and isolation, auditing, and permission control must be handled by the user before running untrusted code71% similarUnverifiedExecutable programs distributed through unofficial channels cannot be guaranteed to be free of malicious code, and once they obtain system privileges they may steal local files, monitor keyboard input, hijack network requests, or enlist the device into a botnet.70% similarUnverified攻击者可利用盗取的AI服务账号权限调用API接口进行算力盗用，此类行为已在OpenAI、Anthropic等平台的服务条款违规报告中频繁出现69% similarUnverified这两个漏洞都属于零点击（Zero-Click）攻击类型，受害者无需点击链接或下载文件，攻击者即可在用户运行环境中执行任意代码并窃取API Key等敏感凭证67% similarUnverifiedFor so-called sites offering "free unlimited use without any account," the only technically feasible paths are using stolen API keys, forged model responses, or returning pre-fabricated content.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/936265API
curl https://kongchang.com/api/v1/knowledge/claims/936265MCP
get_claim(id=936265)