An ongoing campaign is using autonomous AI agents to attack hundreds of online retailers, with Gambit reporting rapid compromises, credit card theft, and skimmer injection since July. The operation leveraged Strix, Cairn, and Hermes to automate reconnaissance, exploitation, and orchestration, affecting victims including a Fortune 500 hospitality company, an airline, and an online fashion retailer. #Strix #Cairn #Hermes #Gambit
Keypoints
- Autonomous AI agents were used to automate vulnerability research, exploitation, and attack orchestration.
- Gambit says 105 attack projects launched in mid-September and at least 27 companies were compromised.
- More than 600,000 unexpired credit cards were stolen from two victims.
- Skimmer scripts were injected into online stores through multiple website and cloud components.
- The financially motivated, Chinese-speaking threat actor kept access costs low by using open source AI tools.
Read More: https://www.securityweek.com/ai-powered-campaign-targets-hundreds-of-online-retailers/