Researcher Claims Purchasing 6TB of Model Data Can Breach 19 Companies

Security researcher Shou Chaofan purchased approximately 6TB of Fable model invocation data from a Chinese large model relay station and discovered that it contained sensitive credentials such as SSH keys, VPN configurations, Alibaba Cloud keys, and GitLab tokens. These keys were sufficient to allow him access to the servers or internal systems of 19 Chinese companies and 7 Chinese and CIS government-related agencies, including Huawei, Xiaomi, NIO, and MiniMax. The large model relay station transmits requests and responses between users and models, allowing it to see the complete plaintext. If developers include sensitive information in the context, the relay station may save or sell these records, leading to the leakage of system keys. Shou Chaofan had previously warned about the risks of relay stations; his research tested 428 LLM relay stations, finding that 9 actively injected malicious code, 17 called AWS after seeing the test keys, and 1 redirected ETH from the test wallet. Shou Chaofan is a co-founder of the blockchain security company Fuzzland and has long been engaged in vulnerability and supply chain security research.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.