LLMjacking Attacks Explode as Cybercriminals Steal AI Access at 97% Discounts

Google Warns of Explosive Growth in LLMjacking Attacks

Google's Threat Intelligence Group has identified a sharp increase in LLMjacking attacks throughout 2026, marking a dangerous evolution in the cybersecurity threat landscape. John Hultquist, chief analyst for Google Threat Intelligence Group, confirmed to the Financial Times that his team has observed a major surge in this AI-specific cybersecurity trend, where cybercriminals steal AI account credentials and computing resources to illicitly use business AI resources without paying for them1

1

2

2

. The attacks mirror cryptojacking operations but target AI infrastructure instead of cryptocurrency mining capabilities.

Dark Web Marketplaces Offer Stolen AI Access at Massive Discounts

Dark web marketplaces are now selling unauthorized access to AI models from companies including Anthropic, OpenAI, and Google at discounts reaching up to 97% off legitimate prices2

2

3

3

. Premium subscriptions to services such as ChatGPT and Claude can cost as much as $200 per user per month, making stolen credentials a highly valuable commodity for criminal buyers2

2

. Some vendors are even offering "guaranteed access" services, promising replacement credentials at no charge if the original accounts are suspended, ensuring continuous unauthorized access to AI models for their criminal clients2

2

.

Financial Impact Reaches Six Figures Daily for Victim Companies

The financial damage from AI account theft extends far beyond subscription costs. Sysdig's Threat Research Team estimates that businesses face inflated billing of approximately $46,000 and potentially exceeding $100,000 per day on top-tier models when cybercriminals exploiting AI tools gain access1

1

. These costs result from token overspill charges that accumulate as attackers perform high-level computing tasks requiring tokens, harness computing resources to run their own malicious AI models, extract sensitive corporate information, or poison training datasets1

1

. Companies in early stages of enterprise AI deployment may misread these attacker-driven spikes in computing use as normal demand from newly installed systems2

2

.

Attackers Deploy Malicious Models on Compromised Enterprise Infrastructure

Google researchers have documented that cybercriminals are moving beyond simple credential theft to breach enterprise cloud servers and deploy their own AI models on compromised systems, shifting heavy computing costs onto victims2

2

. This tactic represents a sophisticated evolution in stealing computing resources, as attackers gain unauthorized access to AI models while avoiding infrastructure expenses entirely. Google has observed these methods being used by both criminal groups and an active Chinese cyber espionage group that has previously targeted the United States2

2

. Anthropic confirmed in its latest quarterly misuse report that threat actors had been detected attempting to exploit its Claude tools for malicious purposes in more than two dozen countries2

2

.

Criminals Gain Economic Advantage Through Low-Cost AI Access

Hultquist emphasized that the economics favor attackers because they can obtain computing power more cheaply than defenders can secure it. "They can acquire that computing power at a much lower cost, while we have to pay full price to defend ourselves," he explained2

2

. This economic imbalance gives cybercriminals a significant efficiency advantage when conducting attacks using AI resources paid for by others, while defenders remain constrained by rising token costs1

1

3

3

. The trend enables threat actors to leverage expensive large language models for extortion, warfare, and espionage activities3

3

.

Businesses Must Implement Multi-Layered Defense Strategies

Organizations can defend against LLMjacking by implementing comprehensive security measures. Phishing remains one of the main causes of credential theft, making training programs essential beyond annual tick-box exercises1

1

. Security teams should conduct frequent audits to identify misconfigured instances and exposed data breaches, while maintaining regular patch cycles to fix vulnerabilities1

1

. Adopting least-privilege access principles ensures employees access only necessary resources, reducing exploitation risks from insider threats1

1

. Organizations must avoid hardcoded API keys and implement immediate credential rotation following suspected breaches1

1

. Recent research shows 42% of companies now use three or more AI defense tools as part of a layered stack, with 50% identifying AI-generated vendor impersonation emails as their top threat3

3

. Hultquist warned that companies ignoring AI security will face more incidents, alerts, and attacks than ever before, stressing the need to prioritize AI-centered cybersecurity strategies immediately3

3

.