Case bizarre-bazaar-llmjackingLLMjackingWorldwide
Operation Bizarre Bazaar: hijacked LLM endpoints resold through commercial marketplace
Pillar Security logged ~35,000 attack sessions scanning for exposed AI endpoints, validating access and reselling it via a marketplace covering 30+ LLM providers.
HighAttack on AIStatus: OngoingVerified case file
Open in the interactive mapCite this case
- Reported
- Jan 28, 2026
- Location
- Worldwide
- Target
- Exposed Ollama, vLLM and MCP endpoints
- Severity
- High
- Triggered by
- Threat actor using aliases Hecker, Sakuya and LiveGamer101
- Actor type
- Criminal
- Reported loss
- None reported
- CVE
- None
What happened
Pillar Security logged ~35,000 attack sessions scanning for exposed AI endpoints, validating access and reselling it via a marketplace covering 30+ LLM providers.
Impact: Hijacked compute, exposure of prompt data and potential pivoting via MCP servers; marketplace resold access to over 30 LLM providers. No dollar figure reported.
Who triggered it
Actor: Threat actor using aliases Hecker, Sakuya and LiveGamer101
Attribution: Attributed by Pillar Security based on honeypot telemetry and marketplace infrastructure
Motive: Financial: reselling stolen LLM access through a marketplace
How it happened
Attack vector: Shodan and Censys scanning for exposed Ollama, vLLM and MCP endpoints, automated API validation via silver.inc, resale via NeXeonAI storefront
Root cause: Self-hosted LLM servers and MCP endpoints exposed on default ports without authentication
Timeline
- Pillar honeypots begin logging campaign activity
- About 35,000 attack sessions recorded across the campaign window
- Pillar Security publishes Operation Bizarre Bazaar report
Response
Pillar published indicators of compromise; no takedown or arrests reported.
Current status: Ongoing
Sources (open in a new tab)
- Pillar Security pillar.security
- BleepingComputer bleepingcomputer.com
- SecurityWeek securityweek.com
Cite this case
Operation Bizarre Bazaar: hijacked LLM endpoints resold through commercial marketplace. AI Threat Watch, case bizarre-bazaar-llmjacking, Jan 28, 2026. https://aithreat.io/cases/bizarre-bazaar-llmjacking/
Permanent link: https://aithreat.io/cases/bizarre-bazaar-llmjacking/