{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/actors/unc6993/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":["UNC6993"],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":[],"_cs_severities":["high"],"_cs_tags":["cloud-security","identity-theft","ai-security","financial-fraud"],"_cs_type":"threat","_cs_vendors":[],"content_html":"\u003cp\u003eThreat actors are increasingly monetizing compromised cloud infrastructure through a practice termed LLMJacking. Attackers gain initial access to organizations, specifically targeting LLM endpoints and associated API keys. Once access is established, the stolen resources are aggregated and resold through underground \u0026quot;LLM Mixer\u0026quot; services. This model allows attackers to profit by routing customer requests through the victim’s environment, often resulting in significant, rapid financial losses for the victim due to cloud resource consumption billing.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eInitial Access: Attackers obtain cloud identity tokens, service account keys, or GitHub Personal Access Tokens (PATs) via phishing, session hijacking, or exploitation of web vulnerabilities in containerized environments.\u003c/li\u003e\n\u003cli\u003eCredential Validation: Attackers perform minimal API requests, often sending a single output token, to verify the validity of stolen credentials while remaining under detection thresholds.\u003c/li\u003e\n\u003cli\u003ePersistence Establishment: Attackers use compromised federation tokens to programmatically generate new, long-lived access keys, bypassing existing MFA controls.\u003c/li\u003e\n\u003cli\u003eInfrastructure Integration: Compromised credentials are integrated into underground \u0026quot;LLM Mixer\u0026quot; services, which act as middlemen to resell enterprise LLM capacity.\u003c/li\u003e\n\u003cli\u003eResource Abuse: The mixer service routes external customer requests through the victim’s cloud environment, causing rapid spikes in computing resource consumption.\u003c/li\u003e\n\u003cli\u003eMonetization: The threat actor collects subscription fees from the reseller network while the victim organization absorbs the high costs of the unauthorized LLM inference requests.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eObserved impacts include rapid spikes in cloud resource consumption. Incidents have resulted in fraudulent charges exceeding $100,000 USD in a single day, with cumulative costs for some organizations reaching $1 million USD before access was revoked.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImplement centralized secrets management to rotate and restrict service account keys and API credentials.\u003c/li\u003e\n\u003cli\u003eEnforce the principle of least privilege for all cloud service accounts and API access tokens.\u003c/li\u003e\n\u003cli\u003eDeploy automated secret scanning tools across internal code repositories (e.g., GitHub, GitLab) to prevent accidental exposure of tokens.\u003c/li\u003e\n\u003cli\u003eEstablish automated billing and resource consumption alerts to identify unauthorized usage spikes in real-time.\u003c/li\u003e\n\u003cli\u003eImplement rate limiting and network allow-listing for all public-facing LLM endpoints.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-03T16:15:15Z","date_published":"2026-11-03T16:15:15Z","id":"https://feed.craftedsignal.io/briefs/2026-11-llmjacking-enterprise/","summary":"Threat actors are leveraging compromised cloud identity tokens and API credentials to gain unauthorized access to enterprise LLM services and reselling that access through underground LLM Mixer services.","title":"LLMJacking: Cybercriminal Resale of Stolen Cloud LLM Access","url":"https://feed.craftedsignal.io/briefs/2026-11-llmjacking-enterprise/"}],"language":"en","title":"CraftedSignal Threat Feed - UNC6993","version":"https://jsonfeed.org/version/1.1"}