---
id: 7078
title: "New Developments in LLM Hijacking Activity"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/jinx-2401-llm-hijacking-aws"
published_at: "2024-12-15T14:07:55Z"
tags: ["ai-security", "cloud", "aws", "llm", "iam", "threat-research", "bedrock"]
phying_url: "https://phying.com/item/7078"
lang: en
---

# New Developments in LLM Hijacking Activity

## Summary

Wiz Research details JINX-2401, a campaign abusing stolen IAM access keys to hijack LLM models on AWS Bedrock, with privilege escalation and persistence techniques seen across multiple environments.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2024-12-15T14:07:55Z
- **Original:** https://www.wiz.io/blog/jinx-2401-llm-hijacking-aws
- **Phying News:** https://phying.com/item/7078