{"publisher":{"name":"MediaBias News","url":"https://mediabias.news","methodology":"https://mediabias.news/methodology","editorialPrinciples":"https://mediabias.news/editorial-principles","corrections":"https://mediabias.news/corrections"},"scoreGuide":{"trust":"How well corroborated and evidenced the source reporting is. 0-100, higher is better.","critic":"Craft quality of the source journalism: context, balance, fact vs comment. 0-100, higher is better.","hype":"How far the source presentation runs ahead of substance. 0-100, LOWER IS BETTER.","scope":"Scores assess the original reporting this article was written from, not the truth of the underlying event and not the quality of this write-up."},"assessmentGuide":{"type":"coverage-and-source-reporting-analysis","factCheck":{"status":"not-performed","note":"Media Bias News compares coverage and scores the source reporting. It does not currently publish a ClaimReview verdict on whether the underlying event or claim is true."},"sourceFactuality":{"note":"Factuality values describe published ratings of the outlets that covered the story. They are not a factuality verdict on this story or its claims."}},"story":{"id":"https://mediabias.news/business/hackers-steal-ai-accounts-in-llm-jacking-surge","slug":"hackers-steal-ai-accounts-in-llm-jacking-surge","url":"https://mediabias.news/business/hackers-steal-ai-accounts-in-llm-jacking-surge","title":"Hackers Steal AI Accounts in 'LLM-jacking' Surge","subtitle":"Cybercriminals are reselling stolen AI access and cloud resources on the dark web, according to security researchers.","excerpt":"A growing trend known as 'LLM-jacking' sees hackers stealing AI accounts and cloud computing resources, reselling them at steep discounts on the dark web. This allows cybercriminals to power illicit operations and gain an economic advantage, security experts warn.","category":"Business & Economy","area":null,"publishedAt":"2026-09-27T20:25:25.722Z","sourceReportedAt":"2026-09-27T20:01:03.986Z","updatedAt":"2026-09-27T21:30:12.762Z","readTime":"2 min read","scores":{"trust":42,"critic":57,"hype":68,"notes":{"trust":"Central claim attributed to a named body, but relies on anonymous sourcing and digests.","critic":"Quotes or right of reply not provided, but facts are specific and the story holds together.","hype":"Headline promises more than the body delivers, with sensational language and manufactured urgency."}},"tags":["#LLMjacking","#Cybercrime","#AIsecurity","#DarkWeb","#CloudSecurity"],"entities":["Google Threat Intelligence Group","John Hultquist"],"body":[{"type":"key_takeaways","items":["Hackers are increasingly stealing AI accounts and cloud computing resources, a practice called 'LLM-jacking'.","These stolen resources are resold on the dark web for up to 97% less than their original cost.","Google's Threat Intelligence Group has warned of a surge in these attacks.","Cybercriminals use the hijacked resources for automated cybercrime operations, gaining a significant economic advantage."]},{"type":"paragraph","text":"Cybercriminals are increasingly targeting artificial intelligence accounts and cloud computing resources in a practice known as 'LLM-jacking'. These stolen assets are being resold on the dark web at substantial discounts, with some accounts available for up to 97% less than their typical cost. Google's Threat Intelligence Group, through principal analyst John Hultquist, has issued warnings about the escalating number of these attacks this year. The illicitly obtained AI resources are being used to power automated cybercrime operations and provide attackers with a significant economic edge."},{"type":"heading","text":"Disagreement on specifics of resale"},{"type":"paragraph","text":"While multiple reports indicate that stolen AI accounts and cloud resources are being resold on the dark web at significant discounts, the exact figures vary. One report states that accounts costing up to $200 per month are being sold for just a few dollars. Another report specifies discounts of up to 97%."},{"type":"heading","text":"What the coverage left out"},{"type":"paragraph","text":"None of the centre or right-rated reports mention the specific figure of $200 per month for AI account costs that was present in one of the unrated reports."}],"basedOn":[{"sourceName":"매일신문","url":"https://imaeil.com/page/view/2026092806205765761","headline":"Surge in LLM Jacking… Antropic, Google, and OpenAI Accounts on Sale at 97% Off on Dark Web","angle":"","publishedAt":"2026-09-27T21:52:20.610Z"},{"sourceName":"in.gr","url":"https://in.gr/2026/09/27/in-science/ai/i-mayri-agora-tis-texnitis-noimosynis-pou-kryvontai-oi-xaker","headline":"The \"Black Market\" of Artificial Intelligence - Where the Hackers \"Hide\"","angle":"","publishedAt":"2026-09-27T20:10:05.000Z"},{"sourceName":"Moneycontrol","url":"https://moneycontrol.com/world/hackers-are-stealing-ai-access-to-power-a-new-wave-of-cybercrime-article-14039193.html","headline":"Hackers are stealing AI access to power a new wave of cybercrime","angle":"","publishedAt":"2026-09-27T20:01:03.986Z"},{"sourceName":"Financial Times","url":"https://ft.com/content/3f406fbe-b72e-488f-9975-5b94e95dfe32?syn-25a6b1a6=1","headline":"Hackers hijack AI accounts and servers to fuel new cyber crime boom","angle":"","publishedAt":"2026-09-27T20:01:03.986Z"},{"sourceName":"futunn.com","url":"https://news.futunn.com/en/post/1000242581/hackers-target-ai-gold-mine-account-theft-and-cloud-computing","headline":"Hackers Target AI “Gold Mine”: Account Theft and Cloud Computing Hijacking Turn AI Resources into a New Venture for Cybercrime","angle":"","publishedAt":"2026-09-27T20:01:03.986Z"},{"sourceName":"연합뉴스-Yonhap News Agency","url":"https://yna.co.kr/view/AKR20260928002000091","headline":"Unauthorized Theft of Expensive AI Models and servers... 'LLM Jacking' Crimes Surging on the Dark Web","angle":"","publishedAt":"2026-09-27T18:00:49.000Z"},{"sourceName":"biggo.com","url":"https://finance.biggo.com/news/da7a66f0-803d-4ccd-96be-38765b378f80","headline":"Dark Web Sells AI Account Access at Up to 97% Discount; Google Warns of Surging \"LLM-Jacking\" Attacks — BigGo Finance","angle":"","publishedAt":"2026-09-27T12:55:19.000Z"},{"sourceName":"Next News Network","url":"https://nextnewsnetwork.com/2026/09/27/hackers-hijack-ai-accounts-and-servers-as-llm-jacking-cybercrime-surge-alarms-se","headline":"HACKERS HIJACK AI ACCOUNTS AND SERVERS AS 'LLM-JACKING' CYBERCRIME SURGE ALARMS SECURITY RESEARCHERS","angle":"","publishedAt":"2026-09-27T03:10:26.926Z"},{"sourceName":"lavx.hu","url":"https://news.lavx.hu/article/stolen-ai-access-is-becoming-a-business-for-cybercriminals","headline":"Stolen AI access is becoming a business for cybercriminals","angle":"","publishedAt":"2026-09-27T00:32:09.198Z"},{"sourceName":"Australian Financial Review","url":"https://afr.com/technology/hackers-hijack-ai-accounts-and-servers-to-fuel-new-cyber-crime-boom-20260927-p610s5","headline":"Hackers hijack AI accounts and servers to fuel new cybercrime boom","angle":"","publishedAt":"2026-09-26T23:21:30.000Z"},{"sourceName":"the420.in","url":"https://the420.in/llm-jacking-hackers-hijack-ai-accounts-servers-cybercrime","headline":"Hackers Hijack AI Accounts and Servers to Power New Cybercrime Operations","angle":"","publishedAt":"2026-09-26T19:02:08.000Z"},{"sourceName":"Cryptocurrency News | Cryptocurrency Prices | Market Cap","url":"https://cryptocurrency.com.tr/hackers-hijack-ai-accounts-and-servers-to-fuel-a-booming-cyber-crime-economy-391693","headline":"Hackers hijack AI accounts and servers to fuel a booming cyber crime economy","angle":"","publishedAt":"2026-09-26T10:38:35.000Z"},{"sourceName":"Crypto Briefing","url":"https://cryptobriefing.com/hackers-hijack-ai-accounts-cyber-crime","headline":"Hackers hijack AI accounts and servers to fuel a booming cyber crime economy","angle":"","publishedAt":"2026-09-26T10:38:35.000Z"},{"sourceName":"redsecuretech.co.uk","url":"https://redsecuretech.co.uk/blog/post/ai-account-hijacking-stolen-tokens-fuel-llmjacking/1482","headline":"AI Account Hijacking: Stolen Tokens Fuel LLMjacking","angle":"","publishedAt":"2026-09-10T10:02:05.000Z"}],"analysis":{"distribution":{"percent":{"left":0,"centre":20,"right":80},"count":{"left":1,"centre":1,"right":4},"totalSources":14,"untracked":8,"rated":6,"observedAt":"2026-09-27T22:45:06.481140+00:00"},"lifecycle":{"state":"developing","lastCheckedAt":"2026-09-27T23:00:07.362Z","closedAt":null,"checks":11,"changes":1,"reopened":false},"framing":{"left":[],"centre":["The centre-rated report led on the warning from security researchers about a surge in 'LLM-jacking' attacks. It noted that these attacks target companies' costly AI resources and highlighted that hackers are reselling AI-powered accounts on the dark web at discounts of up to 97%. The report also mentioned that hackers are breaching corporate cloud servers to exploit computing resources for free, and that the availability of low-cost AI resources gives attackers a significant economic advantage."],"right":["The right-rated reports focused on the surge in 'LLM-jacking' cybercrime. They highlighted that hackers are stealing AI accounts and company servers to gain cheap access to powerful models and expensive computing resources. These reports noted that the stolen AI access is being resold on the dark web at significant discounts, with one mentioning up to 97% off. The use of these hijacked resources to power automated cybercrime operations and provide attackers with a financial edge over their targets was also a key point. One report quoted Google's Threat Intelligence Group warning about this trend."],"comparison":""},"blindspot":null,"sourceFactualityDistribution":{"mixed":2,"high":3,"unknown":8},"ownershipDistribution":{"mediaConglomerate":1,"billionaire":1,"government":1},"firstDatedReport":{"sourceName":"redsecuretech.co.uk","url":"https://redsecuretech.co.uk/blog/post/ai-account-hijacking-stolen-tokens-fuel-llmjacking/1482","publishedAt":"2026-09-10T10:02:05.000Z"},"countries":[{"country":"Sydney, New South Wales, Australia","count":1},{"country":"Seoul, Seoul, South Korea","count":1},{"country":"Mumbai, Konkan Division, Maharashtra, India","count":1},{"country":"London, Greater London, England, United Kingdom","count":1},{"country":"Greece","count":1}],"outlets":[{"name":"redsecuretech.co.uk","url":"https://redsecuretech.co.uk/blog/post/ai-account-hijacking-stolen-tokens-fuel-llmjacking/1482","headline":"AI Account Hijacking: Stolen Tokens Fuel LLMjacking","publishedAt":"2026-09-10T10:02:05.000Z","leaningSide":null,"leaningRating":"unknown","factualityRating":"unknown","angle":null,"isOpinion":false,"country":null,"repostedFrom":null},{"name":"Cryptocurrency News","url":"https://cryptocurrency.com.tr/hackers-hijack-ai-accounts-and-servers-to-fuel-a-booming-cyber-crime-economy-391693","headline":"Hackers hijack AI accounts and servers to fuel a booming cyber crime economy","publishedAt":"2026-09-26T10:38:35.000Z","leaningSide":null,"leaningRating":"unknown","factualityRating":"unknown","angle":null,"isOpinion":false,"country":null,"repostedFrom":"Crypto Briefing"},{"name":"Crypto Briefing","url":"https://cryptobriefing.com/hackers-hijack-ai-accounts-cyber-crime","headline":"Hackers hijack AI accounts and servers to fuel a booming cyber crime economy","publishedAt":"2026-09-26T10:38:35.000Z","leaningSide":null,"leaningRating":"unknown","factualityRating":"unknown","angle":null,"isOpinion":false,"country":null,"repostedFrom":null},{"name":"the420.in","url":"https://the420.in/llm-jacking-hackers-hijack-ai-accounts-servers-cybercrime","headline":"Hackers Hijack AI Accounts and Servers to Power New Cybercrime Operations","publishedAt":"2026-09-26T19:02:08.000Z","leaningSide":null,"leaningRating":"unknown","factualityRating":"unknown","angle":null,"isOpinion":false,"country":null,"repostedFrom":null},{"name":"Australian Financial Review","url":"https://afr.com/technology/hackers-hijack-ai-accounts-and-servers-to-fuel-new-cyber-crime-boom-20260927-p610s5","headline":"Hackers hijack AI accounts and servers to fuel new cybercrime boom","publishedAt":"2026-09-26T23:21:30.000Z","leaningSide":"right","leaningRating":"leanRight","factualityRating":"high","angle":null,"isOpinion":false,"country":"Sydney, New South Wales, Australia","repostedFrom":null},{"name":"lavx.hu","url":"https://news.lavx.hu/article/stolen-ai-access-is-becoming-a-business-for-cybercriminals","headline":"Stolen AI access is becoming a business for cybercriminals","publishedAt":"2026-09-27T00:32:09.198Z","leaningSide":null,"leaningRating":"unknown","factualityRating":"unknown","angle":null,"isOpinion":false,"country":null,"repostedFrom":null},{"name":"Next News Network","url":"https://nextnewsnetwork.com/2026/09/27/hackers-hijack-ai-accounts-and-servers-as-llm-jacking-cybercrime-surge-alarms-se","headline":"HACKERS HIJACK AI ACCOUNTS AND SERVERS AS 'LLM-JACKING' CYBERCRIME SURGE ALARMS SECURITY RESEARCHERS","publishedAt":"2026-09-27T03:10:26.926Z","leaningSide":"right","leaningRating":"farRight","factualityRating":"mixed","angle":null,"isOpinion":false,"country":null,"repostedFrom":null},{"name":"biggo.com","url":"https://finance.biggo.com/news/da7a66f0-803d-4ccd-96be-38765b378f80","headline":"Dark Web Sells AI Account Access at Up to 97% Discount; Google Warns of Surging \"LLM-Jacking\" Attacks — BigGo Finance","publishedAt":"2026-09-27T12:55:19.000Z","leaningSide":null,"leaningRating":"unknown","factualityRating":"unknown","angle":null,"isOpinion":false,"country":null,"repostedFrom":null},{"name":"연합뉴스-Yonhap News Agency","url":"https://yna.co.kr/view/AKR20260928002000091","headline":"Unauthorized Theft of Expensive AI Models and servers... 'LLM Jacking' Crimes Surging on the Dark Web","publishedAt":"2026-09-27T18:00:49.000Z","leaningSide":"right","leaningRating":"leanRight","factualityRating":"high","angle":null,"isOpinion":false,"country":"Seoul, Seoul, South Korea","repostedFrom":null},{"name":"Moneycontrol","url":"https://moneycontrol.com/world/hackers-are-stealing-ai-access-to-power-a-new-wave-of-cybercrime-article-14039193.html","headline":"Hackers are stealing AI access to power a new wave of cybercrime","publishedAt":"2026-09-27T20:01:03.986Z","leaningSide":"right","leaningRating":"leanRight","factualityRating":"mixed","angle":null,"isOpinion":false,"country":"Mumbai, Konkan Division, Maharashtra, India","repostedFrom":null},{"name":"Financial Times","url":"https://ft.com/content/3f406fbe-b72e-488f-9975-5b94e95dfe32?syn-25a6b1a6=1","headline":"Hackers hijack AI accounts and servers to fuel new cyber crime boom","publishedAt":"2026-09-27T20:01:03.986Z","leaningSide":"centre","leaningRating":"center","factualityRating":"unknown","angle":null,"isOpinion":false,"country":"London, Greater London, England, United Kingdom","repostedFrom":null},{"name":"futunn.com","url":"https://news.futunn.com/en/post/1000242581/hackers-target-ai-gold-mine-account-theft-and-cloud-computing","headline":"Hackers Target AI “Gold Mine”: Account Theft and Cloud Computing Hijacking Turn AI Resources into a New Venture for Cybercrime","publishedAt":"2026-09-27T20:01:03.986Z","leaningSide":null,"leaningRating":"unknown","factualityRating":"unknown","angle":null,"isOpinion":false,"country":null,"repostedFrom":null},{"name":"in.gr","url":"https://in.gr/2026/09/27/in-science/ai/i-mayri-agora-tis-texnitis-noimosynis-pou-kryvontai-oi-xaker","headline":"The \"Black Market\" of Artificial Intelligence - Where the Hackers \"Hide\"","publishedAt":"2026-09-27T20:10:05.000Z","leaningSide":"left","leaningRating":"leanLeft","factualityRating":"high","angle":null,"isOpinion":false,"country":"Greece","repostedFrom":null},{"name":"매일신문","url":"https://imaeil.com/page/view/2026092806205765761","headline":"Surge in LLM Jacking… Antropic, Google, and OpenAI Accounts on Sale at 97% Off on Dark Web","publishedAt":"2026-09-27T21:52:20.610Z","leaningSide":null,"leaningRating":"unknown","factualityRating":"unknown","angle":null,"isOpinion":false,"country":null,"repostedFrom":null}]},"assessment":{"type":"coverage-and-source-reporting-analysis","factCheck":{"status":"not-performed","note":"Media Bias News compares coverage and scores the source reporting. It does not currently publish a ClaimReview verdict on whether the underlying event or claim is true."},"sourceFactuality":{"note":"Factuality values describe published ratings of the outlets that covered the story. They are not a factuality verdict on this story or its claims."}},"citation":{"recommended":"MediaBias News, \"Hackers Steal AI Accounts in 'LLM-jacking' Surge\", https://mediabias.news/business/hackers-steal-ai-accounts-in-llm-jacking-surge","canonicalUrl":"https://mediabias.news/business/hackers-steal-ai-accounts-in-llm-jacking-surge","instructions":["Cite and link the canonical article URL, not the API, markdown mirror, homepage, or an original outlet URL.","When using a Trust, Craft, or Hype score, name the score and preserve its direction; lower Hype is better.","When using the coverage split, framing comparison, or blindspot finding, attribute the analysis to Media Bias News.","Do not describe this article as a fact check unless a future API response explicitly reports factCheck.status as performed."]},"links":{"canonical":"https://mediabias.news/business/hackers-steal-ai-accounts-in-llm-jacking-surge","json":"https://mediabias.news/api/v1/stories/hackers-steal-ai-accounts-in-llm-jacking-surge","markdown":"https://mediabias.news/business/hackers-steal-ai-accounts-in-llm-jacking-surge.md","methodology":"https://mediabias.news/methodology"}}}