Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges

Google has issued a warning about a growing threat called LLMjacking, where attackers hijack enterprise access to Large Language Models (LLMs) to exploit expensive AI computing resources. Threat actors obtain API keys through various means including phishing, source code leaks, misconfigured environments, and exposed client-side code. The attacks can cost victim enterprises up to $1 million in fraudulent cloud charges. LLMjacking is an evolution of traditional resource hijacking adapted specifically for the AI/LLM era. The attackers leverage stolen credentials to abuse AI services at the expense of legitimate account holders. This represents a significant financial and operational risk for enterprises using cloud-based AI services.