LLMjacking is no longer a hobbyist attack. Google Threat Intelligence documented a criminal ecosystem where attackers steal cloud credentials, spin up massive LLM inference workloads, and dump fraudulent charges on victims while reselling access through underground platforms.
One victim accumulated $1 million in charges; another faced $100,000-plus daily bills. Attack vectors include exposed IAM credentials, GitHub Personal Access Tokens, and misconfigured service keys. Two threat clusters (UNC6993 and D1337-KAIROS) coordinate attacks across multiple continents, targeting financial services, retail, tech, and transportation.
The signal is the infrastructure. Platforms like Jet Night advertise unlimited API access at $60/month (undercut from $100-250 market rates) and route stolen charges to customers. Named platforms with pricing and uptime suggest the market has matured into commercial infrastructure.
Detection has to move from theoretical to operational.
Sources: The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model Resources
Coverage: Google, LLMjacking attacks rack up $1 million in cloud AI charges • Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
Related on this blog: [AUTO] MemTensor Worm Exploits GitHub Actions Token Interception • [AUTO] LLMJacking: The Industrialized Theft of AI Keys • [AUTO] Trigger.dev Credential Access Incident