The malware family at the center of the activity, PoeLLM, has reportedly infected more than 3,400 servers. Once access is gained, the operators install mining payloads on the compromised systems, using the added compute to mine cryptocurrency while quietly expanding the botnet's footprint.

The campaign stands out because it goes after internet-facing AI and LLM services rather than the usual web application targets. Exposed model endpoints, inference servers, and similar infrastructure give attackers both valuable hardware and a foothold inside environments that are often less hardened than traditional production systems.

Key points:

• Campaign name: Canto Incognito
• Malware: PoeLLM
• Impact: 3,400+ servers infected
• Objective: cryptocurrency mining and botnet expansion
• Target: exposed AI and LLM infrastructure

Operators of AI and LLM services should treat any internet-exposed endpoint as a potential entry point. Restricting access to management interfaces, keeping software patched, and monitoring for unexpected CPU or GPU load are sensible first steps while more details on the campaign emerge.

Source: The Hacker News

Does your organization run any internet-facing AI or LLM services, and how are you securing them?