Criminals use stolen AI access to rack up $1 million cloud bills
Original title: Stolen AI access leaves companies with cloud bills of up to $1 million
GTIG and Mandiant report LLMJacking attacks causing bills up to $1 million via stolen cloud credentials.
Criminals break into corporate cloud accounts to run AI models and generate fraudulent bills. Attacks hit sectors in North America, South America and Asia Pacific. Attackers use services like Jet Night and newapi.pro to resell stolen LLM access.
- Bills reached up to $1 million in some cases
- One group made 500000 calls in under 8 hours
- Used stolen API keys and GitHub tokens
- Attackers turned on AI services to avoid detection
Impact: fraudulent cloud charges from running AI models at victim expense
- CVEs
- CVE-2026-40217
- Threat actors
- UNC6993
- AI models
- LLM Mixers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-40217 | LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI | 8.8 | 16% | PoC |
From the original article
3 min read at helpnetsecurity.com
Criminals who break into corporate cloud accounts are using the stolen access to run AI models at the victim’s expense, in some cases racking up more than $100,000 in charges in a single day, Google Threat Intelligence Group (GTIG) and Mandiant researchers have found.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.