It's only a matter of time before LLMs jump start supply-chain attacks

An interview with Sysdig’s Crystal Morin highlights the rise of “LLMjacking,” where attackers use stolen cloud credentials to access and monetize LLM services, driving significant costs for victims and signaling broader supply-chain risk. The piece underscores a likely 2025 surge in GenAI-assisted spear phishing and social engineering—augmented by tailored messaging and voice cloning—while noting Sysdig’s observed uptick in illicit LLM activity across multiple providers. Although the Change Healthcare ransomware incident is mentioned for context, the report focuses on evolving attacker TTPs rather than a specific incident.