攻击者持续攻击 LiteLLM
AI 导读
攻击者持续攻击 LiteLLM，Wiz 称已开始观测到失窃凭证被滥用，最初与 LLMJacking 相关。研究者 Johann Rehberger（@wunderwuzzi23）引用 Wiz 的更新并作出上述判断，同时链接其此前撰写的分析文章，说明他认为 LiteLLM 被盯上的原因（https://embracethered.com/blog/posts/2026/hijacking-litellm-for-fun-and-profit/）。Wiz 表示其爬虫于美东时间当天上午发现这起供应链事件，此后持续更新追踪，已观测到来自 168.100.8[.]57 和 165.227.201[.]8 两个 IP 的凭证滥用活动。
正文 · 原文
Attackers continue to target LiteLLM.
A while ago I wrote up why I think that's the case
https://embracethered.com/blog/posts/2026/hijacking-litellm-for-fun-and-profit/
We (@wiz_io ) continue to update our post on the LiteLLM supply chain incident, which we've been tracking since our crawler identified it this morning (eastern)
🧑🚒 We've begun to see abuse of stolen credentials - initially related to LLMJacking - from the following IPs
* 168.100.8[.]57
* 165.227.201[.]8在 X 查看被引用的帖子