Google warns of surge in LLM-jacking attacks on AI accounts

By Splitfeed EditorialLast updated Sep 29, 2026, 02:40 UTC

In late September 2026, Google issued a formal warning about a growing pattern of cyberattacks it labels LLM-jacking, in which criminals steal login credentials or API keys tied to AI service accounts at OpenAI, Google, and Anthropic. Once in possession of those credentials, attackers either use the accounts themselves to run costly AI queries or sell access on dark web markets at discounts reported to reach as much as 97 percent below standard retail pricing. The warning, surfacing across technology outlets between September 27 and 28, 2026, indicates the practice has moved beyond isolated opportunistic theft into something organized enough to sustain a secondary market.

The financial mechanics are what give this story weight beyond a routine credential-theft advisory. Premium AI API access is genuinely expensive at scale, and the victim of a hijacked account absorbs those costs without necessarily knowing their credentials have been compromised. A 97 percent discount on dark web markets implies attackers are pricing access low enough to attract bulk buyers while still profiting, which in turn suggests the supply of stolen credentials is substantial. The targets are not obscure platforms; OpenAI, Google, and Anthropic collectively host much of the enterprise and developer AI infrastructure in use today, so the exposure is broad. What remains genuinely disputed is how credentials are being obtained in the first place, whether through phishing, leaked API keys in public code repositories, or compromises of third-party tools.

The pro-AI camp has not yet published reactions to this story. Typically, that camp would be expected to argue that credential theft is a general cybersecurity problem that predates AI and reflects gaps in user security hygiene rather than flaws in AI platforms themselves. The anti-AI camp's response so far centers on the ubiquity of exposure: Golgariguy on Bluesky pointed out that most people already use Google and Microsoft services, framing LLM-jacking as an extension of existing risk onto systems people have little practical choice but to rely on. The middle ground camp has not yet commented, but would characteristically be expected to call for clearer credential monitoring tools from providers and stronger disclosure requirements when accounts are compromised.

The key things to watch are whether Google or the other named providers release specific figures on the scale of confirmed compromises, and whether any details emerge about the primary method attackers are using to harvest credentials. A concrete disclosure from OpenAI or Anthropic about account security incidents, or a follow-up technical report from Google's security teams, would either sharpen or soften the picture considerably.