Moonshot secretly routed user requests through Claude

Nearly 300,000 requests over ten days via 5,380 fraudulent accounts.