From Pymnts · PYMNTS · · 1m 10s
CFOs Face $1M Cloud Bills from Stolen AI
Hackers sell stolen AI access for $60/month, leaving companies with $1M cloud bills.
In brief
Hackers sell stolen AI access for $60/month, leaving companies with $1M cloud bills. Cybercriminals hijack enterprise AI credentials to generate $1 million in cloud charges within days, creating a new fraud category for CFOs. Originally reported by Pymnts.
Quick answers
- What is LLMjacking?
- Cybercriminals hijack enterprise AI credentials to sell stolen access to large language models.
- What is the key takeaway from CFOs Face $1M Cloud Bills from Stolen AI?
- Cybercriminals hijack enterprise AI credentials to generate $1 million in cloud charges within days, creating a new fraud category for CFOs.
What is LLMjacking?
Cybercriminals hijack enterprise AI credentials to sell stolen access to large language models.
“The next million-dollar fraud could be a legitimate cloud bill”
Google Reports $1M Cloud Charges
Fraudulent ai consumption exceeded $100,000 in a single day with cumulative charges reaching $1 million.
“Google’s cyber team documented incidents in which fraudulent ai consumption exceeded $100,000 in a single day”
LLMjacking Targets Multiple Industries
Financial services, retail, technology and transportation companies across continents are affected.
“The attacks have affected financial services, retail, technology and transportation companies across multiple continents”
How LLMjacking Works
Attackers generate high-volume api calls using stolen credentials to create token costs for victims.
“One such service, jet night, advertised unlimited access to frontier models for approximately sixty dollars per month”
Jet Night Service Details
Jet Night sells unlimited access to premium ai models for $60/month with 500,000 api calls in eight hours.
“Google researchers linked the service to an attacker that generated more than 500,000 api calls in less than eight hours”
Why Traditional Controls Fail
Authentication does not equal financial authorization, exposing gaps in ai expense controls.
“Successful authentication does not establish that the business authorized the underlying expense”
CFOs Need New Controls
Firms must implement identity verification and know your customer automation within 12 months.
“The pymnts intelligence report found that 65% of firms plan to adopt or expand identity verification and know your customer automation within the next twelve months”
In short
Cybercriminals hijack enterprise AI credentials to generate $1 million in cloud charges within days, creating a new fraud category for CFOs.
