Fake OpenAI / Anthropic / Vertex AI / AWS Bedrock API key leak lure — "your API key was exposed in a public GitHub repo, rotate immediately or incur charges" targeting developers with paid AI API keys; key + billing-dashboard harvest enables $10K-$100K+ rapid drain at high-end model rates + billing-email rotation to hide usage alerts
fake-ai-api-key-leak-lure
What this tier means
High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.
How Gorganizer detects this
Fake "your OpenAI / Anthropic / Google Cloud Vertex AI / AWS Bedrock API key has been exposed in a public GitHub repository — your key is being used for attacker workloads, rotate immediately" email targeting developers who hold paid AI API keys. Different attack shape from `fake-chatgpt-plus-subscription-renewal-lure` (consumer Plus subscribers) — this targets DEVELOPERS with pay-as-you-go production API keys tied to credit cards, where compromise economics are far more severe. Post-compromise attackers: (1) run workloads on the victim's API key until the organization hits its rate or spend limit ($10K-$100K+ in hours at high-end model rates); (2) exfil the full billing dashboard history + linked payment card; (3) rotate billing email to an attacker-controlled address so the victim doesn't see usage-alert notifications; (4) if the key has write access to uploaded training data or custom models, exfil proprietary fine-tune data and prompts. The lure converts because developers DO routinely commit API keys to public repositories by accident — GitHub publishes real weekly secret-scanning statistics showing thousands of keys exposed per week. The "rotate now or incur charges" urgency is exactly how OpenAI and Anthropic's real secret-scanner alerts are phrased, so the phish structurally mimics genuine notifications. Fires when body references OpenAI API / Anthropic API / Claude API / Google Cloud Vertex AI / AWS Bedrock / Azure OpenAI / platform.openai / console.anthropic AND contains key-exposed-leaked-compromised / public GitHub repo / rotate immediately / unauthorized-usage / billing drain urgency. Excludes openai.com, platform.openai.com, anthropic.com, console.anthropic.com, google.com, cloud.google.com, amazon.com, amazonaws.com, github.com, githubmail.com, microsoft.com, azure.com. Auto-classified as danger via the `-lure` suffix.
False-positive guard
Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.
About the scoring engine
Gorganizer's scoring engine emits 2,143+ signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.
Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.
Ready to clean your inbox?
Gorganizer scans your Gmail with this signal and 2,143+ others, then cleans everything in one click. $4.99 one-time, no subscription.
Get started