[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxiVG6sfq_UKG7SArayQmilcIHKvsT0TDdxt-0C-NBKY":3},{"article":4,"iocs":53,"watch_terms":64,"solutions":65,"lesson":159},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"0f50de7d-786c-4b76-a57f-c4b7dd8a6c38","AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining","ai-gateway-connected-to-amazon-bedrock-hijacked-for-cryptomining-d32997","Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity.","A LiteLLM AI gateway connected to Amazon Bedrock was compromised and used for Monero cryptomining. The attack vector appears to be an exposed SSH port, leading to the download of XMRig malware and subsequent connection to a mining pool. The incident highlights the security risks associated with AI gateways acting as privileged cloud infrastructure.","AI gateway connected to Amazon Bedrock hijacked for cryptomining via exposed SSH.","https:\u002F\u002Fhackread.com\u002Fai-gateway-amazon-bedrock-hijacked-cryptomining\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fai-gateway-amazon-bedrock-hijacked-cryptomining-1.jpg","2026-07-09T17:19:50+00:00","2026-07-09T18:00:26.003728+00:00",8,[17,20,22,25,27],{"name":18,"type":19},"Amazon Bedrock","product",{"name":21,"type":19},"LiteLLM",{"name":23,"type":24},"Amazon","vendor",{"name":26,"type":24},"Darktrace",{"name":28,"type":29},"AI Gateway","technology","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":30,"icon":32,"name":33,"slug":34},null,"Malware","malware",[36,41,43,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"0493c7e9-989a-4692-b4e6-136f5ec09675","Cryptography","cryptography",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54,58,61],{"type":55,"value":56,"context":57},"ip","145.241.123.102","IP address observed with high volume of inbound connection attempts to the compromised instance.",{"type":34,"value":59,"context":60},"XMRig","Cryptocurrency miner downloaded by the compromised instance.",{"type":55,"value":62,"context":63},"185.62.1.8","IP address from which the malware ZIP archive was downloaded.",[23,26,18],{"controls":66,"vendors":153},[67,95,124],{"slug":68,"name":69,"problem":70,"products":71},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[72,79,87],{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":68,"product_name":76,"url":77,"description":78},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"slug":96,"name":97,"problem":98,"products":99},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[100,108,116],{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"slug":125,"name":126,"problem":127,"products":128},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",[129,137,145],{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","quantum-firewall","Quantum Force firewalls","https:\u002F\u002Fwww.checkpoint.com\u002Fquantum\u002Fnext-generation-firewall\u002F","Next-generation firewalls with threat prevention.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-firewall","Sophos Firewall","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fnext-gen-firewall","Next-generation firewall with intrusion prevention.",{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"sonicwall","SonicWall","\u002Fvendor-logos\u002Fsonicwall.png","sonicwall-firewalls","SonicWall firewalls","https:\u002F\u002Fwww.sonicwall.com\u002Fproducts\u002Ffirewalls","Next-generation firewalls for small business to enterprise.",[154],{"slug":155,"name":26,"logo_path":156,"roles":157},"darktrace","\u002Fvendor-logos\u002Fdarktrace.png",[158],"reported_by",{"slug":160,"title":161,"body":162,"framework_refs":163,"framework_notes":173},"exposed-ssh-port-on-ai-gateway-leads-to-cryptomining-compromise","Exposed SSH Port on AI Gateway Leads to Cryptomining Compromise","An AI gateway (LiteLLM) connected to Amazon Bedrock was hijacked for Monero cryptomining after an SSH port was left exposed to the internet, allowing attackers to deploy XMRig malware. The root issue is a misconfigured, internet-facing service with insufficient access restrictions on a privileged component that had direct cloud infrastructure access. This matters because AI gateways often carry elevated permissions to cloud services like Bedrock, making them high-value targets — a single compromise can cascade into broader cloud account abuse, cost explosion, and data exposure. Organizations are rapidly deploying AI infrastructure without applying the same hardening rigor used for traditional systems, creating a growing and underappreciated attack surface.",[164,165,166,167,168,169,170,171,172],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 CM-7: Least Functionality","NIST SP 800-53 SC-7: Boundary Protection","NIST SP 800-53 SI-3: Malicious Code Protection","AWS Well-Architected Framework: Security Pillar — Infrastructure Protection","MITRE ATT&CK T1496: Resource Hijacking (Cryptomining)",{}]