The most typical API actions referred to as by attackers through compromised credentials earlier this 12 months included InvokeModel, InvokeModelStream, Converse, and ConverseStream. Nonetheless, attackers had been additionally lately noticed utilizing PutFoundationModelEntitlement and PutUseCaseForModelAccess, that are used to allow fashions, together with ListFoundationModels and GetFoundationModelAvailability, upfront in an effort to detect which fashions an account has entry to.
Because of this organizations which have deployed Bedrock however not activated sure fashions aren’t secure. The distinction in value between completely different fashions will be substantial. For instance, for a Claude 2.x mannequin utilization the researchers calculated a possible value of over $46,000 per day however for fashions similar to Claude 3 Opus the price could possibly be two to 3 instances increased.
The researchers have seen attackers utilizing Claude 3 to generate and enhance the code of a script designed to question the mannequin within the first place. The script is designed to constantly work together with the mannequin, producing responses, monitoring for particular content material, and saving the ends in textual content recordsdata.
