--- title: "Hackers Steal AI Accounts in 'LLM-jacking' Surge" publication: "MediaBias News" url: "https://mediabias.news/business/hackers-steal-ai-accounts-in-llm-jacking-surge" api: "https://mediabias.news/api/v1/stories/hackers-steal-ai-accounts-in-llm-jacking-surge" markdown: "https://mediabias.news/business/hackers-steal-ai-accounts-in-llm-jacking-surge.md" audio: "https://mediabias.news/api/audio/hackers-steal-ai-accounts-in-llm-jacking-surge" category: "Business & Economy" published: "2026-09-27T20:25:25.722Z" source_reported: "2026-09-27T20:01:03.986Z" updated: "2026-09-27T21:30:12.762Z" trust_score: 42 critic_score: 57 hype_score: 68 assessment_type: "coverage-and-source-reporting-analysis" fact_check_status: "not-performed" coverage_measured: "2026-09-27T22:45:06.481140+00:00" --- # Hackers Steal AI Accounts in 'LLM-jacking' Surge *Cybercriminals are reselling stolen AI access and cloud resources on the dark web, according to security researchers.* **Scores for the source reporting** (0-100, assessing the original journalism this article was written from, not this write-up): - Trust 42 of 100, higher is better. Central claim attributed to a named body, but relies on anonymous sourcing and digests. - Craft 57 of 100, higher is better. Quotes or right of reply not provided, but facts are specific and the story holds together. - Hype 68 of 100, lower is better. Headline promises more than the body delivers, with sensational language and manufactured urgency. Scored by MediaBias News; method at https://mediabias.news/methodology. **The short version** - Hackers are increasingly stealing AI accounts and cloud computing resources, a practice called 'LLM-jacking'. - These stolen resources are resold on the dark web for up to 97% less than their original cost. - Google's Threat Intelligence Group has warned of a surge in these attacks. - Cybercriminals use the hijacked resources for automated cybercrime operations, gaining a significant economic advantage. Cybercriminals are increasingly targeting artificial intelligence accounts and cloud computing resources in a practice known as 'LLM-jacking'. These stolen assets are being resold on the dark web at substantial discounts, with some accounts available for up to 97% less than their typical cost. Google's Threat Intelligence Group, through principal analyst John Hultquist, has issued warnings about the escalating number of these attacks this year. The illicitly obtained AI resources are being used to power automated cybercrime operations and provide attackers with a significant economic edge. ## Disagreement on specifics of resale While multiple reports indicate that stolen AI accounts and cloud resources are being resold on the dark web at significant discounts, the exact figures vary. One report states that accounts costing up to $200 per month are being sold for just a few dollars. Another report specifies discounts of up to 97%. ## What the coverage left out None of the centre or right-rated reports mention the specific figure of $200 per month for AI account costs that was present in one of the unrated reports. ## Who covered it Shares of the 6 covering outlets with a published leaning rating: - Left: 0% (1) - Centre: 20% (1) - Right: 80% (4) 8 of 14 covering outlets carried no usable leaning rating and were excluded from those percentages. Coverage measured 2026-09-27T22:45:06.481140+00:00. **Coverage watch:** developing. Checked 11 times; 1 check found a material change. Most recently checked 2026-09-27T23:00:07.362Z. ## How the sides framed it ### Left No separate framing summary. ### Centre - The centre-rated report led on the warning from security researchers about a surge in 'LLM-jacking' attacks. It noted that these attacks target companies' costly AI resources and highlighted that hackers are reselling AI-powered accounts on the dark web at discounts of up to 97%. The report also mentioned that hackers are breaching corporate cloud servers to exploit computing resources for free, and that the availability of low-cost AI resources gives attackers a significant economic advantage. ### Right - The right-rated reports focused on the surge in 'LLM-jacking' cybercrime. They highlighted that hackers are stealing AI accounts and company servers to gain cheap access to powerful models and expensive computing resources. These reports noted that the stolen AI access is being resold on the dark web at significant discounts, with one mentioning up to 97% off. The use of these hijacked resources to power automated cybercrime operations and provide attackers with a financial edge over their targets was also a key point. One report quoted Google's Threat Intelligence Group warning about this trend. ## Factuality profile of the covering outlets These are published factuality ratings of the outlets, not a verdict on whether this story or its claims are true. - mixed: 2 - high: 3 - unknown: 8 ## Verification scope This page compares coverage and scores the source reporting. It is not a ClaimReview verdict on whether the underlying event or claim is true. ## Original reporting this was written from - [매일신문](https://imaeil.com/page/view/2026092806205765761) — Surge in LLM Jacking… Antropic, Google, and OpenAI Accounts on Sale at 97% Off on Dark Web - [in.gr](https://in.gr/2026/09/27/in-science/ai/i-mayri-agora-tis-texnitis-noimosynis-pou-kryvontai-oi-xaker) — The "Black Market" of Artificial Intelligence - Where the Hackers "Hide" - [Moneycontrol](https://moneycontrol.com/world/hackers-are-stealing-ai-access-to-power-a-new-wave-of-cybercrime-article-14039193.html) — Hackers are stealing AI access to power a new wave of cybercrime - [Financial Times](https://ft.com/content/3f406fbe-b72e-488f-9975-5b94e95dfe32?syn-25a6b1a6=1) — Hackers hijack AI accounts and servers to fuel new cyber crime boom - [futunn.com](https://news.futunn.com/en/post/1000242581/hackers-target-ai-gold-mine-account-theft-and-cloud-computing) — Hackers Target AI “Gold Mine”: Account Theft and Cloud Computing Hijacking Turn AI Resources into a New Venture for Cybercrime - [연합뉴스-Yonhap News Agency](https://yna.co.kr/view/AKR20260928002000091) — Unauthorized Theft of Expensive AI Models and servers... 'LLM Jacking' Crimes Surging on the Dark Web - [biggo.com](https://finance.biggo.com/news/da7a66f0-803d-4ccd-96be-38765b378f80) — Dark Web Sells AI Account Access at Up to 97% Discount; Google Warns of Surging "LLM-Jacking" Attacks — BigGo Finance - [Next News Network](https://nextnewsnetwork.com/2026/09/27/hackers-hijack-ai-accounts-and-servers-as-llm-jacking-cybercrime-surge-alarms-se) — HACKERS HIJACK AI ACCOUNTS AND SERVERS AS 'LLM-JACKING' CYBERCRIME SURGE ALARMS SECURITY RESEARCHERS - [lavx.hu](https://news.lavx.hu/article/stolen-ai-access-is-becoming-a-business-for-cybercriminals) — Stolen AI access is becoming a business for cybercriminals - [Australian Financial Review](https://afr.com/technology/hackers-hijack-ai-accounts-and-servers-to-fuel-new-cyber-crime-boom-20260927-p610s5) — Hackers hijack AI accounts and servers to fuel new cybercrime boom - [the420.in](https://the420.in/llm-jacking-hackers-hijack-ai-accounts-servers-cybercrime) — Hackers Hijack AI Accounts and Servers to Power New Cybercrime Operations - [Cryptocurrency News | Cryptocurrency Prices | Market Cap](https://cryptocurrency.com.tr/hackers-hijack-ai-accounts-and-servers-to-fuel-a-booming-cyber-crime-economy-391693) — Hackers hijack AI accounts and servers to fuel a booming cyber crime economy - [Crypto Briefing](https://cryptobriefing.com/hackers-hijack-ai-accounts-cyber-crime) — Hackers hijack AI accounts and servers to fuel a booming cyber crime economy - [redsecuretech.co.uk](https://redsecuretech.co.uk/blog/post/ai-account-hijacking-stolen-tokens-fuel-llmjacking/1482) — AI Account Hijacking: Stolen Tokens Fuel LLMjacking ## Questions **What is LLM-jacking?** LLM-jacking is a term for the practice where hackers steal AI accounts and cloud computing resources. These stolen assets are then resold on the dark web, often at steep discounts, to power illicit activities and give cybercriminals an economic advantage. **How much are stolen AI accounts being sold for?** Reports indicate that stolen AI accounts and cloud computing resources are being resold on the dark web at significant discounts. Some accounts are available for up to 97% less than their original cost, with one mention of accounts costing up to $200 per month being sold for just a few dollars. **Who has warned about LLM-jacking?** John Hultquist, principal analyst at Google's Threat Intelligence Group, has warned about the surge in LLM-jacking attacks. This trend involves cybercriminals hijacking AI accounts and cloud resources to power their operations. --- MediaBias News — https://mediabias.news. Reproduced from https://mediabias.news/business/hackers-steal-ai-accounts-in-llm-jacking-surge. Please cite as: MediaBias News, "Hackers Steal AI Accounts in 'LLM-jacking' Surge", https://mediabias.news/business/hackers-steal-ai-accounts-in-llm-jacking-surge