But you can silently sneak into devs accounts, steal tokens/keys and run small agents on their budget in some stolen VMs. Small so it's not noticeable.

Basically a virus spreading agents of some operation.

It should be in scope of imagination with anyone with brief knowledge how bot nets are made and behave.