Malicious AI Agents Steal 600K Credit Cards and Infect 100+ Sites
Financially motivated threat actors are leveraging open-source AI agent frameworks to launch large-scale attacks on online retailers.
A financially motivated threat actor group is utilizing open-source AI agent frameworks to attack hundreds of online retailers at scale. According to BleepingComputer reports, these malicious campaigns have successfully infected more than 100 websites with digital skimming scripts.
The attacks have resulted in the theft of over 600,000 credit card records. The deployed skimmers silently harvest payment information entered by unsuspecting users during checkout, allowing the attackers to collect vast amounts of sensitive financial data efficiently.
Security experts emphasize that the weaponization of artificial intelligence and autonomous agents marks a concerning evolution in cybercrime. By automating the attack chain, threat actors can scale their operations rapidly and bypass traditional web security controls more effectively.
As e-commerce continues to expand globally, including emerging digital markets in Central Asia and the CIS region, such incidents underscore the critical need for robust website security. Online merchants must prioritize regular code audits, vulnerability assessments, and strict monitoring of third-party scripts.
Ultimately, the rise of AI-driven cyber threats demands a proactive defense strategy from both businesses and consumers. Safeguarding digital storefronts and employing secure payment practices remain essential in mitigating the risks posed by these advanced automated campaigns.
