They Didn’t Build It, They Didn’t Pay for It, But They’re Running It Right Now - In YOUR Environment

No ratings

Presented at BSidesAugusta 2026 by

David Branscome

You deployed an AI service, followed the docs, and even remembered to rotate your passwords (well - mostly). But somewhere on the internet, a criminal syndicate is using your Azure API key to generate content you’d rather not explain to HR - and they’re billing it to you. This session walks through the Storm-2139 takedown - a real Microsoft Digital Crimes Unit operation spanning four countries, a federal lawsuit, and criminals who responded by harassing Microsoft’s lawyers online (yes, really). We’ll cover how AI APIs became the hottest new attack surface, and what you can actually do about it before the bill arrives.