谷歌与Mandiant披露LLMJacking攻击 盗用AI密钥致巨额损失
Start here
2026年11月3日，Google威慑情报团队（GTIG）与Mandiant联合披露了多起针对企业大语言模型访问权限的“LLMJacking”攻击事件。黑客通过盗用受害企业的AI API密钥获取大模型访问权限，并在权限被发现并吊销前进行滥用。据披露，已有单家受害企业因此累计产生了近100万美元的高额云账单，凸显了企业在云端AI资源访问权限管理方面的安全风险。
AI-generated from reports · Updated 23 hours ago
Report timeline
Follow the reports to see different sides of the story.
- Hacker News · AISelectedGoogle Discloses LLMJacking Attacks: Stolen AI API Keys Cost a Single Enterprise Nearly $1 Million
The Google Threat Intelligence Group (GTIG) and Mandiant have disclosed multiple "LLMJacking" attacks targeting enterprise LLM access, with one victim racking up nearly $1 million in cloud bills before the unauthorized access was revoked.
Story heat trend
Current heat 5·Comparable peak 10（Nov 3 09:00）·Comparable change, last 24 hours–
Trends compare only the same parties observed continuously, so the scope can be narrower than current heat counts. Move the pointer or tap the chart to see hourly heat; use the left and right arrow keys on a keyboard.