Token Jacking: Cybercriminals Could Be Stealing Your AI Resources

Cybercriminals are exploiting a growing trend of AI token jacking to generate significant financial losses. As AI adoption increases and costs for accessing powerful models rise, attackers are stealing API keys – known as tokens – to gain unlimited access to AI services through proxy stations called ‘transfer stations.’ These stations, often operating from China, facilitate the resale of discounted AI computing capacity, allowing attackers to bypass restrictions and access frontier models. The financial impact can be substantial, with organizations facing hundreds of thousands of dollars in charges and potential damage to budgets. Palo Alto Networks recommends implementing several security measures, including spending limits, centralized key management, and utilizing AI gateways to mitigate these risks.