Hackers are using 'LLMjacking attacks' to hijack company AI usage and run up huge cloud bills
Cybercriminals are increasingly executing "LLMjacking" attacks by leveraging stolen cloud credentials to hijack enterprise access to…
Cybercriminals are increasingly executing "LLMjacking" attacks by leveraging stolen cloud credentials to hijack enterprise access to hosted Large Language Models (LLMs). Security researchers at Sysdig report that attackers target vulnerable cloud environments to gain unauthorized entry to AI platforms such as Amazon Bedrock. Instead of traditional cryptojacking, hackers use the stolen infrastructure to run their own AI workloads or resell model access on the dark web, generating cloud bills that can exceed tens of thousands of dollars per day for affected organizations. Securing cloud credentials, enforcing least-privilege access policies, and monitoring for abnormal API activity are critical to mitigating these financial and operational risks.