AI Token Jacking Lets Hackers Steal API Keys and Rack Up Nearly $1 Million in Charges
Brief
AI credentials are drawing criminal attention. A growing form of abuse, called AI token jacking, lets intruders take API keys and consume expensive model services on someone else’s account. The result can be a sudden bill.
The theft is not limited to a single break-in method. Attackers can obtain developer credentials through phishing, information-stealing malware, exposed file shares, public code repositories, or poisoned software packages.
A compromised key can feed an illicit proxy service that consumes paid AI capacity.
Analysts at Unit 42 identified a rising number of these cases and described losses that can become severe within minutes.
Palo Alto Networks said in a report shared with Cyber Security News (CSN) that attackers have turned inadvertently exposed credentials into nearly $1 million in charges before victims detected and contained the abuse.