AWS AI Gateway Wired to Amazon Bedrock Hijacked for Cryptomining

An internet-exposed "LiteLLM-Proxy" EC2 instance acting as an AI gateway with a privileged IAM role for Amazon Bedrock

With SSH (port 22) open to `0.0.0.0/0`, the host was brute-forced, a 3.42 MB XMRig cryptominer was pulled from an attacker endpoint, and the instance began mining to `pool.hasvault[.]pro`. Follow-on activity from a Vietnam-based IP attempted Bedrock model calls and an IAM `CreateUser`, showing intent to abuse the gateway's model access and cloud privileges

An AI gateway that centralizes model access, identities, and cloud IAM privileges, left exposed to the internet with weak SSH controls, becomes a high-value pivot. Detected by Darktrace (activity June 12-13, 2026)