AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining

Darktrace observed an Amazon EC2 instance running LiteLLM (acting as an AI gateway) compromised—likely via public SSH exposure and scanning—download a ZIP containing XMRig from 185.62.1.8 and subsequently connect to a Monero mining pool (pool.hasvault.pro). The instance's role with Amazon Bedrock access raised concerns about exposure of credentials, model permissions, prompts, and logs; the behavior was classified as high-priority cryptocurrency mining and the host was shut down.