The next million-dollar fraud could be a legitimate cloud bill. Cybercriminals are hijacking enterprise AI credentials, reselling access to premium models and leaving victims with six- and seven-figure charges.

Hackers have found a way to make companies finance their own attacks. LLMjacking turns stolen AI access into immediate revenue, with criminals collecting subscription fees while victims absorb the computing costs.

AI spending is becoming a cybersecurity liability CFOs can’t ignore. Traditional AP controls weren't built for fraudulent expenses accumulating at machine speed, exposing a gap between technical access and financial authorization.

There’s a new flavor of AP fraud in town, and it’s all about AI. Cybercriminals have found a way to monetize stolen corporate artificial intelligence infrastructure in real time, selling unauthorized access to large language models (LLMs) while the companies whose credentials were compromised absorb the charges.

Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.

A Monday (Nov. 2) report from Google’s cyber threat intelligence division exposes a new blind spot in corporate finance: AI spending can become a fraud liability long before it appears on an invoice. In its report, Google’s cyber team documented incidents in which fraudulent AI consumption exceeded $100,000 in a single day, with cumulative charges at some organizations reaching $1 million before access was revoked.

The attacks, known as LLMjacking, have affected financial services, retail, technology and transportation companies across multiple continents. For CFOs, the attacks expose a weakness in the financial controls surrounding consumption-based AI infrastructure, where an authenticated software request can trigger a billable expense without anyone in finance approving the transaction.

Source link