Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers

By Bill Toulas

AI Summary

A financially motivated threat actor is leveraging open-source AI agent frameworks to compromise online retail sites at scale, injecting payment card skimmers across 100+ sites and stealing more than 600,000 credit card records. The AI-assisted attack automation represents a significant escalation in Magecart-style campaign reach and speed. E-commerce security teams should audit third-party script integrity and CSP configurations urgently.

Read full article → https://www.bleepingcomputer.com/news/security/mal…

Relevance score: 82.0/100

# More from September 24

1
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers The Hacker News
2
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants The Hacker News
3
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks The Hacker News
4
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware The Hacker News
5
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises The Hacker News
6
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key The Hacker News
7
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape The Hacker News
9
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw BleepingComputer
10
Arista patches actively exploited VeloCloud Orchestrator zero-day BleepingComputer