Google Threat Intelligence: LLMJacking monetizes compromised AI resources

Evidence record

First-party cloud threat intelligence on theft and monetization of model API access.

Read the original source ↗

Claim-level citations (3)

• supportsStolen AI API access supported more than 500,000 model calls in eight hours: Google identified the service Jet Night as an example of stolen-key token routing and described an advertised unlimited-token offer near US$60 per month, without establishing the operator’s collected revenue.

  LLMJacking monetization and Jet Night token routing service paragraph

• supportsStolen AI API access supported more than 500,000 model calls in eight hours: Google Threat Intelligence reported inference theft measured in requests and estimated provider charges; these figures do not establish collected reseller revenue or recovered victim payments.

  Incident cost calculations, cloud misuse and resale discussion

• supportsStolen AI API access supported more than 500,000 model calls in eight hours: Google Threat Intelligence observed a threat actor making more than 500,000 model API calls within eight hours using stolen third-party keys, with victim costs approaching one million US dollars.

  Jet Night token routing service and eight-hour API-call count