Google/Mandiant: LLMjacking intrusions ran up more than $100,000 a day in model charges and up to $1M per victim, with stolen access resold through 'LLM Mixers' like Jet Night

official (Google Threat Intelligence Group and Mandiant, Nov 2)2026-11-03

Google/Mandiant: LLMjacking intrusions ran up more than $100,000 a day in model charges and up to $1M per victim, with stolen access resold through 'LLM Mixers' like Jet Night

Validation sweeps: stolen keys were checked with single-token requests (max_tokens=1) that stay under volume alerts; watch gateway logs for these.
Persistence: backdoor service accounts named like billing-optimization tools, SSH keys injected into instance metadata, "burn and rotate" short-lived service accounts to dodge rate limits, a Manus-based agent backdoor and GPU quota requests across regions.
AWS: CloudTrail for bedrock.amazonaws.com: InvokeModel, InvokeModelWithResponseStream, Converse; recon via ListFoundationModels, GetFoundationModelAvailability; unlocks via PutUseCaseForModelAccess, CreateFoundationModelAgreement; treat DeleteModelInvocationLoggingConfiguration by a non-IaC principal as high severity.
GCP: alert on ServiceUsage.EnableService for aiplatform; enable Data Access logs to see PredictionService.GenerateContent/StreamGenerateContent.
Azure: Microsoft.CognitiveServices/accounts/deployments/write and diagnostic-settings changes.
Network IoCs: jet-night[.]com, newapi[.]pro.

Cheapest fixes: deny model-service permissions to identities that don't need them, set hard budgets and per-model quotas, scope API keys to specific models and environments, and patch LiteLLM and other model gateways like any internet-facing app.

Sources: Google Cloud Threat Intelligence: The Rise of LLMJacking (Nov 2) · The Hacker News: Google warns LLMjacking attacks are costing some enterprises up to $1 million