AI Token Abuse: Why Hackers Are Targeting Your AI Keys
Artificial intelligence (AI) has created new opportunities for businesses, but it has also introduced an unexpected cybersecurity risk. Hackers are increasingly targeting exposed AI API keys to access expensive models, consume computing resources, and generate unauthorized usage charges. Instead of stealing money directly, cybercriminals exploit someone else's AI infrastructure, turning compromised credentials into a source of financial gain. AI token abuse occurs when attackers gain unauthorized access to AI services, credits, or usage allowances. Since AI providers often charge based on the number of tokens processed and generated, stolen credentials can result in significant expenses. A related threat, known as LLMjacking, involves hijacking large language model resources to run AI workloads, access premium models, or resell unauthorized AI services. Some documented incidents have resulted in fraudulent cloud charges exceeding $100,000 in a single day. Hackers typically obtain...