Hackers launch LLMJacking attacks, generating $1M cloud bills
Original title: Hackers Launch LLMHijacking Attacks, Leaving Companies With $1 Million in Cloud Bills
Attackers abuse stolen LLM credentials via LLM Mixers, reselling access while passing bills to victims across continents.
Hackers steal corporate LLM access and resell it, leaving victims with cloud bills reaching $1 million. Mandiant investigated incidents in 2026 where unauthorized AI use generated over $100,000 daily charges. Google Threat Intelligence Group detailed LLMJacking in November 2 research. Attacks targeted organizations in financial services, retail, technology and transportation across North America, South America and Asia Pacific using stolen service account keys, GitHub tokens and session data.
Unconfirmed: Link between Northflank incident and these operations not established
- More than 500,000 LLM API calls in under eight hours
- One incident passed nearly $1M costs via Jet Night service
- Affected regions span North America, South America and Asia Pacific
- Used fake membership portal for token reuse
- Exploited LiteLLM flaw CVE-2026-40217
Impact: unauthorized LLM usage billed to victims
- 1.Rotate exposed secrets
- 2.Scan repositories for keys
- 3.Enforce model-specific quotas
- CVEs
- CVE-2026-40217
- ATT&CK
- T1550.002 Pass the Token
- Threat actors
- UNC6993
- Countries
- United StatesBrazilSingapore
- AI models
- large language models
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-40217 | LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI | 8.8 | 16% | PoC |
From the original article
2 min read at cybersecuritynews.com
Hackers are stealing access to corporate large language models and reselling it, leaving victims with cloud bills reaching $1 million. Mandiant investigated multiple incidents during 2026 where unauthorized AI use generated more than $100,000 in charges in a single day, showing how quickly stolen credentials can become a major financial loss. Google Threat Intelligence Group […]
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.