{"id":3930,"date":"2025-02-07T20:27:00","date_gmt":"2025-02-07T20:27:00","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/llm-hijackers-use-deepseek-api-keys\/"},"modified":"2025-02-07T20:27:00","modified_gmt":"2025-02-07T20:27:00","slug":"llm-hijackers-use-deepseek-api-keys","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/llm-hijackers-use-deepseek-api-keys\/","title":{"rendered":"LLM Hijackers Use DeepSeek API Keys"},"content":{"rendered":"\n<\/p>\n<p><strong>Sophisticated &quot;LLMjacking&quot; Operations Target DeepSeek Models<\/strong><\/p>\n<div data-module=\"content\">\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Sophisticated &#8220;LLMjacking&#8221; operations have obtained stolen access to DeepSeek models, just weeks after their public release.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">LLMjacking, similar to proxyjacking and cryptojacking, involves the illicit use of someone else&#8217;s computing resources for one&#8217;s own purpose.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The victim, who wishes to remain anonymous, had his AWS credentials compromised, resulting in a $10,000 to $20,000 bill for half a day&#8217;s usage.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The victim had cost alerts toggled on in AWS, which allowed him to spot the anonymous activity early and shut off his account immediately.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">AWS ultimately bailed out the victim, but the incident highlights the potential risks of LLMjacking on an enterprise level.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">&#8220;You can imagine what a similar attack would do on an enterprise level, considering what could happen to just a single person,&#8221; warns Crystal Morin, who first reported the incident.<\/span><\/p>\n<\/div>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Source: Crystal Morin via LinkedIn<\/p>\n<\/div>\n\n<br \/><a href=\"https:\/\/www.darkreading.com\/application-security\/llm-hijackers-deepseek-api-keys\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Sophisticated &quot;LLMjacking&quot; Operations Target DeepSeek Models Sophisticated &#8220;LLMjacking&#8221; operations have obtained stolen access to DeepSeek models, just weeks after their public release. LLMjacking, similar to proxyjacking and cryptojacking, involves the&#8230;<\/p>\n","protected":false},"author":19,"featured_media":3931,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[],"class_list":["post-3930","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/02\/DeepSeek-Sergio_Delle_Vedove-Alamy.jpg","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/3930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=3930"}],"version-history":[{"count":0,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/3930\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/3931"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=3930"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=3930"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=3930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}