TLDR InfoSec · MISCELLANEOUS
TOKEN THIEVES COSTING COMPANIES $100K+ PER DAY IN ILLICIT LLM CHARGES
Summary from the TLDR InfoSec newsletter
Google Mandiant reports that criminals are stealing LLM API keys and cloud service account credentials, then running high-volume model inference at victims' expense. Charges reached $100,000 per day in one case and $1 million in total before access was revoked. One service, Jet Night, allegedly used stolen keys to offer access to frontier models for about $60 per month.