The most typical API actions referred to as by attackers by way of compromised credentials earlier this 12 months included InvokeModel, InvokeModelStream, Converse, and ConverseStream. Nevertheless, attackers have been additionally lately noticed utilizing PutFoundationModelEntitlement and PutUseCaseForModelAccess, that are used to allow fashions, together with ListFoundationModels and GetFoundationModelAvailability, prematurely in an effort to detect which fashions an account has entry to.
Because of this organizations which have deployed Bedrock however not activated sure fashions aren’t protected. The distinction in price between totally different fashions may be substantial. For instance, for a Claude 2.x mannequin utilization the researchers calculated a possible price of over $46,000 per day however for fashions akin to Claude 3 Opus the price may very well be two to 3 instances larger.
The researchers have seen attackers utilizing Claude 3 to generate and enhance the code of a script designed to question the mannequin within the first place. The script is designed to constantly work together with the mannequin, producing responses, monitoring for particular content material, and saving the leads to textual content recordsdata.
