Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers

A threat actor weaponized open-source AI agent frameworks to automate the full attack lifecycle — from vulnerability scanning to skimmer deployment — across more than 100 e-commerce websites, exfiltrating over 600,000 credit card records. The use of AI dramatically lowered the barrier to entry, allowing a sophisticated, scalable attack for as little as $12,000–$18,000 in operational costs. This illustrates how AI is reshaping the threat landscape by enabling adversaries to conduct enterprise-scale attacks with minimal resources. Retailers with unpatched storefronts, weak input validation, or inadequate monitoring are now prime targets for these automated, low-cost campaigns. The incident underscores that the speed of AI-assisted attacks has likely outpaced traditional, manual security response cycles.