Google Warns of LLMjacking Threats Leading to Excessive Cloud Expenses for Enterprises

Google has identified LLMjacking as a growing threat where attackers exploit enterprise API keys to abuse expensive LLM resources, resulting in significant cloud cost fraud. The attacks leverage methods such as phishing, source code leaks, and misconfigured environments to gain unauthorized access.

Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services.

The tactic is called LLMjacking, a form of resource hijacking adapted for the LLM era, where an attacker obtains an API key through phishing, source code leaks, misconfigured environments, or exposed client-side code

Read original article