how the hell are they able to resell the keys and be able to take profit from that is beyond my imagination. Is not money what they are stoling and they are still able to take advantage of it.

With cloud credentials I understand that they are able to create machines, but with api keys... what they are able to do to take profit from?