Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
-
A financially motivated threat actor has been observed using open-source AI agent frameworks to conduct large-scale attacks against online retailers, resulting in the theft of more than 600,000 credit card records and the compromise of over 100 websites with payment skimmers.
The operation relies on AI agents to automate and scale what would traditionally require significant manual effort, from reconnaissance through to the deployment of malicious scripts on victim sites. According to the reporting, the campaign targets e-commerce platforms at scale rather than focusing on individual merchants, allowing the actor to harvest card data from many victims simultaneously.
Key points from the reporting:
- The threat actor is financially motivated and leverages open-source AI agent frameworks as part of their tooling.
- More than 600,000 credit card records were stolen.
- Over 100 sites were infected with skimmer code.
- The scale of the operation points to heavy automation across the attack lifecycle.
The use of AI agent frameworks marks a notable shift in how skimming campaigns can be executed, lowering the effort required to identify and compromise large numbers of retail sites while maintaining a high volume of stolen payment data.
Source: BleepingComputer
Has your organization reviewed its payment page scripts for unauthorized modifications in light of automated skimming campaigns like this?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login