Published • loading... • Updated
Malicious AI Agents Steal 600K Credit Cards, Infect 100+ Sites with Skimmers
Gambit Security said the campaign used AI agents to scan targets, plant skimmers and steal more than 600,000 card records for about $8,000.
- Between September 10 and 15, a hacker used AI agents to compromise up to 100 companies, stealing more than 600,000 credit card records, according to Forbes.
- The operation utilized Chinese AI models DeepSeek and Kimi alongside Claude Opus, spending around $8,000 total; three frameworks—Strix, Cairn, and Hermes—orchestrated the attack pipeline, per Cybersecurity News.
- American cardholders accounted for approximately 488,000 stolen records, or about 79 percent of the total. Victims included a Fortune 500 hospitality firm, a major airline, and other enterprises across at least 27 compromised companies.
- Anthropic banned the attacker's account, while Gambit Security partnered with Cloudflare and the Shadowserver Foundation to dismantle infrastructure. In two cases, the cleanup process accidentally erased victims' entire data, including backups.
- Attacks remain ongoing as the attacker repeatedly rebuilds servers, according to Cloudflare. Eyal Sela, director of threat intelligence at Gambit Security, called it one of "the most severe abuses of AI for exploitation seen so far.
Insights by Ground AI
19 Articles
19 Articles
Chinese Hacker Deploys AI Agents to Raid Retailers, Stealing 600,000 Cards for Pennies
A Chinese-speaking attacker used three open-source AI agents to hit over 100 companies, steal more than 600,000 credit cards and plant skimmers on at least 119 retail sites. The campaign, uncovered by Gambit Security, cost roughly $25 per target and continues today. Automation has slashed both effort and expense for large-scale payment fraud.
The Daily HodlReposted by 
Cryptocurrency News | Cryptocurrency Prices | Market Cap
Cryptocurrency News | Cryptocurrency Prices | Market CapAI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites
Autonomous AI tools have stolen more than 600,000 credit cards from two firms and installed skimmers on at least 119 websites, at roughly $25 per target.
Chinese hackers have carried out a major cyberattack, using inexpensive tools. Reports indicate that Chinese hackers attacked more than 100 companies and stole over 600,000 credit card details.
Coverage Details
Total News Sources19
Leaning Left0Leaning Right1Center6Last UpdatedBias Distribution86% Center
Bias Distribution
- 86% of the sources are Center
86% Center
C 86%
14%
Factuality
To view factuality data please Upgrade to Premium
