New LLMjacking Attack Uses Stolen Cloud Credentials to Target Cloud-Hosted AI Models

Sysdig researchers discovered evidence of a reverse proxy for LLMs being used to provide access to the compromised accounts, suggesting a financial motivation. However, another possible motivation is to extract LLM training data.