Security · 4 November 2026
Google reports LLMjacking fraud generates up to $1 M daily cloud AI charges
Google’s Threat Intelligence Group and Mandiant observed LLM hijacking attacks that steal API keys or scan exposed endpoints, then resell access through “LLM mixers,” causing request spikes over 1,000 req/s and fraudulent cloud bills exceeding $100 k per day, with some organizations facing $1 M charges. Activity increased this year.
Why it matters
Add monitoring for abnormal LLM request volumes; users will expect alerts before charges reach $100 k daily.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 4 Nov →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.