Observed incident

Bizarre Bazaar monetized exposed AI endpoints

Reported

What happened

Pillar reported scanning and unauthorized use of exposed LLM infrastructure, linking validation traffic to a marketplace reselling access to AI services.

Parties and reporting

AI tools and systems: Ollama, vLLM, OpenAI-compatible APIs, Model Context Protocol

Outcome

Pillar documented the activity and indicators from its honeypots, including roughly 35,000 sessions. The report does not establish campaign-wide eradication.

Operating lesson

Require authentication, restrict network exposure, and monitor inference usage on every AI endpoint.

Evidence and limits

Session counts and marketplace attribution come from Pillar's investigation, not a count of breached organizations. The report distinguishes separate MCP reconnaissance traffic.

Sources