KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key Theft

The KeyHunter Operation pairs LLM key theft with an academic fraud campaign that reaches Harvard alumni data, Stanford applications and 18 other universities. SOCRadar’s Threat Research Unit (STRU) attributes the operation to leepsmarts, a Chinese-speaking threat actor, with activity confirmed as late as October 13, 2026.

Read the full article at SOCRadar →