Executive Summary
Threat actors are abusing stolen or exposed enterprise LLM access to generate unauthorized AI-service and cloud costs, reportedly reaching up to $1 million for some organizations. Enterprises operating LLM applications or AI agents should treat API-key exposure and resource abuse as material security and financial risks.
What Happened
Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services. The tactic is called LLMjacking, a form of resource hijacking adapted for the LLM era, where an attacker obtains an API key through phishing, source code leaks, misconfigured environments, or exposed client-side code
Affected Products
- Large Language Models (LLMs)
- AI services
Vulnerability / Attack Technique
LLMjacking / resource hijacking
Technical Mechanism
An attacker obtains an enterprise API key through phishing, source code leaks, misconfigured environments, or exposed client-side code. The attacker then hijacks access to enterprise LLMs and AI services to consume expensive computing resources fraudulently.
AI Security Category
LLM10:2025 Unbounded Consumption
Relevant Frameworks
RealGround Analysis
LLMjacking matters because compromised credentials can turn LLM applications or AI agents into unauthorized consumption channels with direct cloud-cost impact. Teams should validate that agent and application access is tightly scoped, monitored, and resilient to credential exposure.
Recommended Controls
- Store LLM API keys in a managed secrets system rather than source code or client-side applications.
- Use short-lived, scoped credentials with least-privilege permissions and regular rotation.
- Apply per-key and per-tenant quotas, spending limits, rate limits, and automatic shutdown thresholds.
- Monitor LLM usage, authentication events, and cloud billing for anomalous models, regions, volumes, or spending.
- Test phishing, source-code leakage, misconfiguration, and exposed-client-code scenarios through AI-focused red teaming.
Related RealGround Service
AI CISO Advisory · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/11/google-warns-llmjacking-attacks-are.html
Summary and analysis written by RealGround from the source above; last updated 2026-11-04.