Hijacking of Computing Resources
運算資源遭劫持挪用
Operation & Monitoring
Risk Description
When an organization's development environment is compromised due to inadequate protection, and the attacker installs mining software that runs during off-peak hours; due to unmitigated control gaps, the anomaly is discovered only when cloud costs spike, by which time substantial charges have accrued, triggering compliance exposure and operational reputational costs.
Framework Mappings
OWASP Top 10 for LLMLLM10
MITRE ATLASAML.T0029
ISO/IEC 5338運作與監控
MIT AI Risk RepositoryDomain 2
Risk Treatment & Implementation Guidance
Monitor GPU utilization and workload signatures, alerting on anomalous off-peak activity; Isolate development workloads and restrict executable processes; Set real-time cloud-cost alert thresholds so anomalies surface before the bill