---
title: "Enterprises pay $100,000 a day for AI they never ordered"
type: signal
url: https://frontiernewswire.com/s/enterprises-pay-100-000-a-day-for-ai-they-never-ordered-3b2c3e9b
published: 2026-11-03T11:52:38.000Z
byline: "Source: CSO Online"
---

# Enterprises pay $100,000 a day for AI they never ordered

Source: CSO Online · Published 2026-11-03 · Canonical: https://frontiernewswire.com/s/enterprises-pay-100-000-a-day-for-ai-they-never-ordered-3b2c3e9b

Enterprises deploying large language models (LLMs) in production may be unknowingly footing the bill for someone else’s AI business. Google Threat Intelligence Group (GTIG) is warning of financially motivated LLMjacking campaigns in which cybercriminals hijack enterprise cloud and model access before reselling it through underground subscription services. The activity can generate fake cloud charges exceeding $100,000 in a single day, GTIG said in a blog post . In some incidents, cumulative charges reached $1 million before organizations revoked the compromised access. “LLM Mixers turn stolen enterprise model access into a service for paying customers, while the victim’s systems continue accepting requests through credentials they recognize,” said Piyush Sharma , co-founder and CEO at Tuskira. “That puts a lot of weight on the authority attached to each credential. A key issued for one application shouldn’t become a reusable pass to other models and workloads.” GTIG’s analysis is based

In this story: [Google Threat Intelligence Group](https://frontiernewswire.com/companies/google-threat-intelligence-group)

## Sources

- [Read the original at CSO Online](https://www.csoonline.com/article/4243863/enterprises-pay-100000-a-day-for-ai-they-never-ordered.html)

## Related on Frontier

- [Northflank security breach leads to abuse of customers' AI API keys](https://frontiernewswire.com/s/northflank-security-breach-leads-to-abuse-of-customers-ai-api-keys-0e250be7)
- [Chainalysis Warns Customers After “Offensive Agentic” Security Incident](https://frontiernewswire.com/s/chainalysis-warns-customers-after-offensive-agentic-security-incident-d2dd5682)
- [Major Cyber Attacks in October 2026: Fake AI, Account Takeovers, and Remote Access Threaten US and EU](https://frontiernewswire.com/s/major-cyber-attacks-in-october-2026-fake-ai-account-takeovers-and-c1c7b6aa)

---

[More Latest Signal](https://frontiernewswire.com/) · [Signals](https://frontiernewswire.com/verified-reporting)