Security1 hSeptember 28, 2026, 16:53

AI agents stole 600,000 credit cards for about $25 a target, Gambit says

Security firm Gambit says an operator used three open-source AI agent frameworks — Strix, Cairn and Hermes — to breach at least 27 companies and steal over 600,000 credit card records. The campaign began in July and cost an estimated $12,000–18,000, with an average scan costing $25.46.

TNW

Open source

AI agents stole 600,000 credit cards for about $25 a target, Gambit says

At least 27 companies breached, including a Fortune 500 firm and a major US airline
Over 600,000 cards stolen, 79% belonging to US cardholders
Operator typed 1,951 prompts across 260 sessions, spending $7,005.71 on OpenRouter
Skimmers hid in jQuery, Google tags and Kubernetes containers

#OpenAI#Anthropic#OpenRouter#DeepSeek

Malicious AI agents steal 600K credit cards, infect 119 sites with skimmers

Security

AI tools let hacker breach retailers for $25 per target

Business

Devastated father says his 9-year-old son spent $118,000 on YouTube ad campaigns for his Minecraft channel using a company credit card — bill racked up in just three weeks was supposed to be one $20 p

AI agents stole 600,000 credit cards for about $25 a target, Gambit says

Malicious AI agents steal 600K credit cards, infect 119 sites with skimmers

AI tools let hacker breach retailers for $25 per target

Devastated father says his 9-year-old son spent $118,000 on YouTube ad campaigns for his Minecraft channel using a company credit card — bill racked up in just three weeks was supposed to be one $20 p

Chinese AI models reach up to 67% of tokens on OpenRouter and Vercel