LLMjacking: Where It Came From, How It Works and Why Your Bill Is the Evidence
Attackers are targeting one of the weakest links in the new AI economy: API keys. Where LLMjacking came from, how it works, and why your bill is the evidence.
Vectoral Labs
Free tools and
original research
Vectoral Labs is the research arm of Vectoral where we investigate new threats, analyze reseller markets, and develop tools to help share what we have learned.
LLMjacking: Where It Came From, How It Works and Why Your Bill Is the Evidence
Attackers are targeting one of the weakest links in the new AI economy: API keys. Where LLMjacking came from, how it works, and why your bill is the evidence.
ReadResearch
Everything we've published.
- 01Read
- 02Read
Behind the Scenes: How We Mapped the AI Relay Market
How our relay-market investigation came together: firsthand inference abuse, discussions on a Chinese developer forum, advertised relay pricing and third-party traffic estimates.
- 03Read
The AI Account Reseller Ecosystem
Inside the account-merchant market that supplies relays and model labs — what a Claude Max subscription actually sells for, who moves them, and how the accounts get made.
- 04Read
Who Are the Token Brokers?
The brokers buying unused AI credits from startups and reselling them — the marketplaces, the bulk-discount routers, and the message boards where off-market inference changes hands.
- 05Read
An Inside Look at the Relay Market Powering Token Resellers and Fraud
The gray-market reseller economy that gives mainland China cheap, structured, B2B-grade access to OpenAI, Anthropic, Google, and beyond.
Tools
TokenPwn · Free
Check a key →Has your API key been pwned?
Check whether an LLM API key has been leaked without sending us the key.
More tools are in the lab.