LLMJacking: Stolen Credentials Fuel LLM Access Resale and $1M in Cumulative Charges
1. Overview Article: The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model Resources Source: Google Threat Intelligence Group Published: 2026-11-02 Original: Google Threat Intelligence Group Related Source: LiteLLM Official Advisory: CVE Matching Check Related Malware: ai-r
Multiple threat actors are abusing stolen cloud credentials, LLM API keys, and public endpoints to resell LLM quotas to third parties. Mandiant confirmed an incident where a victim organization incurred approximately $1 million in unauthorized usage charges before access was revoked. Note that pathways involving privilege escalation or persistence in cloud environments must be distinguished from pathways that directly abuse LLM API keys or public endpoints.
Alternative pathways and monetization flows compiled by Google from multiple response cases. Path A, Path B, and subsequent monetization have different prerequisites and scopes, and the observed tools and actions were not all executed consecutively in a single incident.
No additional hypotheses. Unverified items are documented under "Uncertainties and Limitations".
Organizations should treat LLM API keys as high-value cloud resources and monitor service enablement, API key creation, low-volume key-validation requests, quota increases, spikes in inference-token consumption, and billing changes together. They should also investigate GitHub PATs, service account keys, federation tokens, and model gateways across the different intrusion paths that can lead to LLM abuse.