Live › campaign › CMP-202611-eqkfyp
Google Threat Intelligence (2 Nov 2026) reports multiple LLMjacking intrusions during 2026 in North America, South America and Asia Pacific. Attackers get in with leaked GitHub PATs, AWS IAM credentials, misconfigured GCP service account keys, federation tokens, exposed Ollama endpoints, or the LiteLLM /key/regenerate flaw (CVE-2026-40217). They then turn on LLM services that were often never enabled, create new API keys, and resell the model quota through 'LLM mixer' relays (jet-night.com, newapi.pro, the new-api and gcli2api tooling). UNC6993 used a fake portal to harvest access-token JSON, which gets around passwords and MFA, and ran up more than $100,000 in charges. Jet Night made 500,000+ API calls in under 8 hours, costing one victim about $1M. Some actors also use burn-and-rotate service accounts and inject SSH keys for persistence. Victims are not named.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 13:16 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AWS Bedrock | – | – | – |
| Google Vertex AI / Gemini API | – | – | – |
| Azure OpenAI / Azure AI Services | – | – | – |
| LiteLLM | – | – | – |
| Ollama | – | – | – |
| AWS IAM | – | – | – |
| Google Cloud IAM | – | – | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
This page as .md · .json · in your agent: get_signal("CMP-202611-eqkfyp")