src_0060ae82ad11b5dc16
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Jan 08, 2026 00:00 UTC
- Retrieved
- Oct 08, 2026 03:52 UTC
Threat Actors Actively Targeting LLMs
Our Ollama honeypot infrastructure captured 91,403 attack sessions between October 2025 and January 2026. Buried in that data: two distinct campaigns that reveal how threat actors are systematically mapping the expanding surface area of AI deployments.
Reference details
- Source category
- Research & news
- Report title
Threat Actors Actively Targeting LLMs- First reported
- Jan 08, 2026 00:00 UTC
- Last reported
- Jan 08, 2026 00:00 UTC
- Catalog updated
- Oct 08, 2026 03:52 UTC
- Record ID
31a4632130120a4bef98b02a369a6fa7cdd9c6ddb6ce1a68f325d4c267c1fa8b
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.