Hackers are using 'LLMjacking attacks' to hijack company AI usage and run up huge cloud bills

Date:
Tue, 03 Nov 2026 15:25:00 +0000

Description:
Businesses can run up $100,000 bills in minutes when hackers gain access to their API keys.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Cybercriminals are stealing AI API keys and cloud credentials to hijack expensive LLM services and infrastructure Stolen access is used to run AI workloads, create proxy services, and rack up massive bills for victims Google warns LLMjacking is evolving into a specialized cybercrime ecosystem with dedicated monetization operators Threat actors are using large language models (LLM) to support almost every stage of a cyberattack, from researching potential victims to developing malware and automating various attacks. However, using AI is not cheap, and for those eager to use frontier models, costs can stack up relatively quickly.

But cybercriminals are used to stealing things, so why not steal someone
elses tokens, too? A new report from Google s Threat Intelligence Group
(GTIG) says that different hacking groups are doing exactly that and that the practice - known as LLMjacking - has been steadily growing more popular over the last couple of years. Latest Videos From TechRadar Watch full video here:

Most groups start by focusing either on publicly exposed LLM endpoints, or on obtaining valid LLM application programming interface (API) keys. In many cases, the crooks would use exposed or stolen cloud identity tokens (IAM credentials, Service Account keys, GitHub Personal Access Tokens, and active session tokens) to establish an initial foothold into the target
organizations infrastructure.

From there, they would systematically work to escalate privileges, solidify their access, and identify targets for further compromise. You may like Cloud and AI bills looking a bit high? Your AI agents may have been let loose and run up huge spending costs Rogue AI agent engages 'Skynet mode' to search the internet for exposed LLMs to hijack and run malware attacks ChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes LLMjacking The endgame is LLMjacking, which GTIG describes as the
monetization and resource-hijacking of foundation models, which actors
achieve through token proxying, automated model streaming, and GPU hardware provisioning. In other words, someone else is using your AI subscription
while you get the bill.

The bills can cause quite the headache, too. With cryptojacking, for example, token mining is relatively slow and steady, and a certain amount of time
needs to pass for the charges to really stack up. With LLMjacking, however, costs can go into six digits in six minutes. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me
with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Upon acquiring LLM API access keys, UNC6993 attempted to generate additional API keys and enable associated services within victim cloud projects, quickly accumulating over $100,000 in billing charges, Google says in the report.

Another threat actor subscribed victim accounts to Pay-As-You-Go agreements, selecting premium foundation models and launching high-volume inference streams. To bypass rate limits, the threat actor deployed a "burn and rotate" strategy, continuously creating and deleting short-lived service accounts while auditing the cloud providers billing interface to monitor financial impact.

In some cases, threat actors also used the acquired access to host their own proxy endpoints and agentic workloads. Google says that one threat actor enabled agents, deployed publicly accessible reverse proxies, and used custom Node.js proxy bundles to expose endpoints compatible with multiple frontier LLMs rebranded under a persona known as D1337-KAIROS. What to read next Security flaws found in top open source AI gateway LiteLLM vulnerabilties could affect millions of users Chinese hacker hits over 100 company websites using AI agents Deere and SharkNinja among top brands affected in attack
This new Windows malware steals all your data, then uses AI to rank how valuable you are as a victim

This actor deployed a containerized backdoor which queried an upstream LLM to reason through instructions and execute commands locally. A growing ecosystem The LLMjacking ecosystem is young, but growing fast and maturing even faster. Google says that there is already a division of labor between hacking groups that establish initial access to compromised environments, and operators who manage downstream monetization infrastructure. The latter are called LLM Mixers and they operate as a routing gateway that proxies, aggregates, and resells unauthorized LLM access to underground subscribers.

In one investigation, GTIG observed two distinct operational clusters coordinating to compromise and monetize enterprise LLM infrastructure, demonstrating the sophisticated specialization emerging in this space, Google said.

By using open source API gateways and custom relay infrastructure, the attackers were able to pool stolen credentials, meter usage, and hide where the requests really originated from.

Google is now sounding the alarm, saying it expects threat actors to increasingly prioritize LLMjacking at the expense of other resource theft practices. It urges organizations to increase their visibility of LLM platforms, prioritize detection of modifications to LLM accounts and
services, and treat any unauthorized enablement as a critical security event. It also advised organizations to enforce the principle of least privilege and make sure accounts and users only have permissions they absolutely need to
get the job done. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/hackers-are-using-llmjacking-attacks-to -hijack-company-ai-usage-and-run-up-huge-cloud-bills


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)