Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges

Google has issued a warning about a type of attack known as LLMjacking, in which threat actors hijack enterprise access to Large Language Models to exploit expensive computing resources and AI services. This is achieved by obtaining an API key through various means, including phishing, source code leaks, misconfigured environments, or exposed client-side code. The result can be substantial, with some enterprises facing cloud charges of up to $1 million. LLMjacking is a form of resource hijacking that has been adapted to take advantage of the Large Language Model era. Threat actors are using this tactic to fraudulently leverage costly resources. The financial impact of these attacks can be significant for affected enterprises.