Microsoft Exposes LLMjacking Cybercriminals Behind Azure AI Abuse Scheme

Summary: Microsoft has unveiled four individuals involved in a cybercrime network, known as Storm-2139, that exploited unauthorized access to Azure’s generative AI services for harmful activities, including creating illicit content. The campaign, referred to as LLMjacking, encompasses a broader network of individuals engaged in modifying and reselling access to these malicious AI tools. Microsoft has taken legal action against the offenders and is monitoring additional unnamed participants in this operation.

Affected: Microsoft Azure OpenAI Service

Keypoints :

• Identified individuals include Arian Yadegarnia (Iran), Alan Krysiak (UK), Ricky Yuen (Hong Kong), and Phát Phùng Tấn (Vietnam).
• The group exploited exposed customer credentials to access generative AI accounts illegally.
• Microsoft aims to establish a precedent in the fight against misuse of AI technology by targeting these malicious actors.