Hacker News · AI· khalidkhair·· 1 day agoSelectedAI score79
Google Discloses LLMJacking Attacks: Stolen AI API Keys Cost a Single Enterprise Nearly $1 Million
Stolen AI API keys generated nearly $1M in charges for a single company
AI guide
The Google Threat Intelligence Group (GTIG) and Mandiant have disclosed multiple "LLMJacking" attacks targeting enterprise LLM access, with one victim racking up nearly $1 million in cloud bills before the unauthorized access was revoked.
Why it matters
The report details the complete chain of threat actors stealing LLM credentials and reselling them for profit, offering practical incident response and auditing guidance for enterprises to guard against unexpected cloud bills.
Source:Hacker News · AI · cloud.google.com