<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Hans Dekker</title><description>Security research and detection engineering.</description><link>https://hansdekker.dev/</link><item><title>How fraudulent AWS accounts feed a Claude distillation market: reverse-engineering Kiro-account-manager</title><link>https://hansdekker.dev/writing/fraudulent-aws-accounts-claude-distillation/</link><guid isPermaLink="true">https://hansdekker.dev/writing/fraudulent-aws-accounts-claude-distillation/</guid><description>An open-source tool mass-creates fraudulent AWS accounts by forging Amazon&apos;s anti-bot fingerprint, feeding a Chinese-language market in discounted Claude access. How it works, and what defenders can learn from it.</description><pubDate>Thu, 05 Nov 2026 00:00:00 GMT</pubDate></item></channel></rss>