
Hackers launch LLMJacking attacks, generating $1M cloud bills
Attackers abuse stolen LLM credentials via LLM Mixers, reselling access while passing bills to victims across continents.
9 stories, newest first · one card per story

Attackers abuse stolen LLM credentials via LLM Mixers, reselling access while passing bills to victims across continents.

A suspected Chinese operator used the ARTEX AI pentest tool to steal data from South Korean financial firms.

New Windows botnet 'x47.c' offers 18 attacks, including a novel method to drain victims' paid AI API credits.

Over 80,000 relay servers enable users in China to bypass region bans on U.S. AI models, facilitating potential model distillation and abuse.

Researchers uncovered 10,000 Chinese proxy servers masking malicious AI activity, while Ukrainian hackers leaked Russian naval secrets and ShinyHunters claimed an FBI hack.

Anthropic reports ShinyHunters, Midnight Blizzard, and GTG-10007 misused Claude to automate credential theft, malware operations, and espionage against dozens of victims.

Anthropic's 154-page report details Generative Threat Groups, including APT29-linked GTG-20006 and ShinyHunters affiliates, using Claude for reconnaissance, exploitation, and data theft.

Anthropic disrupted Midnight Blizzard campaigns where AI agents automatically rebuilt malware to evade detection, targeting 20+ government and defense organizations.
Commodity infostealer malware hijacked Anthropic user accounts, letting criminals mine AI tokens on victims' paid usage; Anthropic cracked down on affected accounts.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views