Hackers are using 'LLMjacking attacks' to hijack company AI usage and run up huge cloud bills
- Cybercriminals are stealing AI API keys and cloud credentials to hijack expensive LLM services and infrastructure
- Stolen access is used to run AI workloads, create proxy services, and rack up massive bills for victims
- Google warns “LLMjacking” is evolving into a specialized cybercrime ecosystem with dedicated monetization operators
Threat actors are using large language models (LLM) to support almost every stage of a cyberattack, from researching potential victims to developing malware and automating various attacks. However, using AI is not cheap, and for those eager to use frontier models, costs can stack up relatively quickly.
But cybercriminals are used to stealing things, so why not steal someone else’s tokens, too?
A new report from Google’s Threat Intelligence Group (GTIG) says that different hacking groups are doing exactly that and that the practice - known as LLMjacking - has been steadily growing more popular over the last couple of years.
...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
