Frequency
2
occurrences
First Seen
March 19, 2026
Last Seen
August 28, 2026
Related Threat Clusters
-
OpenWebUI Servers Hijacked for Crypto Mining and Data Theft
A malicious campaign has exploited vulnerable OpenWebUI servers, turning them into a network of cryptocurrency mining machines and information stealers. The campaign has been active since late 2024, affecting thousands…
2 articles · Updated March 19, 2026 -
Cyber Attackers Exploit AI Infrastructure for API Key Theft and RCE
Cyber attackers are increasingly targeting AI infrastructure, particularly systems like LiteLLM and RAGFlow, to steal API keys and hijack computing resources. Research from Wiz.io indicates that over a 90-day period,…
2 articles · Updated August 28, 2026
Recent Intelligence Reports
- Hackers Target AI Infrastructure With RCE and API Key Theft — Cypro · August 28, 2026
- Malicious campaign targeting vulnerable OpenWebUI servers: technical analysis — Cybernews · March 19, 2026