S0133RS3-T15-S0133-Z · Full risk code

Hijacking of Computing Resources

運算資源遭劫持挪用

Operation & Monitoring
Risk Description

When an organization's development environment is compromised due to inadequate protection, and the attacker installs mining software that runs during off-peak hours; due to unmitigated control gaps, the anomaly is discovered only when cloud costs spike, by which time substantial charges have accrued, triggering compliance exposure and operational reputational costs.

Framework Mappings

OWASP Top 10 for LLMLLM10
MITRE ATLASAML.T0029
ISO/IEC 5338運作與監控
MIT AI Risk RepositoryDomain 2

Risk Treatment & Implementation Guidance

Monitor GPU utilization and workload signatures, alerting on anomalous off-peak activity; Isolate development workloads and restrict executable processes; Set real-time cloud-cost alert thresholds so anomalies surface before the bill