LLMjacking

The term covers a growing criminal market in stolen model-API credentials, which can be used for compute, for jailbroken services, or sold on. Inference and fine-tuning platforms are attractive targets because they store customers' credentials for other services as job secrets. The defence is short-lived scoped keys, spend alerts and rotation that happens at the issuing provider, since deleting a stored copy of a key does not revoke it.