AI-assisted campaign hit 105 shops and stole 600,000 cards
Original title: AI Tools Are Generating Massive Attacks for Little Cost
Gambit Security says 27 companies were compromised for about $25.46 each; a Silverfort lab run took a domain in eight minutes for $12.
According to Gambit Security, a Chinese-speaking attacker spent five days in September using three AI harnesses and both open-weight and public models against 105 e-commerce sites. The system compromised at least 27 companies, including one Fortune 500 firm, stole at least 600,000 payment-card records from two, and installed card skimmers on five. Separately, Silverfort said a lab agent using public Claude Opus reached full domain control in eight minutes for about $12.
Unconfirmed: Campaign scale, victims, and costs are Gambit Security’s account; Silverfort’s result is a lab test.
- Gambit says compromises often landed within a day and at most within hours.
- Illicit access was claimed for the remaining compromised companies.
- The reported attacker cost averaged $25.46 per completed target.
- Silverfort’s domain-control figure comes from a lab test, not a confirmed breach.
Impact: Payment card records stolen and website card skimmers installed
- Organizations
- Gambit SecuritySilverfort
- AI models
- Claude Opus
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 21b825d74e7c4683dd09d788c7fc31aa | /apple-patch-policy-ai#recipe=similar-items&sourcecontentid=21b825d74e7c4683dd09d788c7fc31aa) Apple Reverses Age-Old Patch Policy to Keep Up With AI by |
| md5 | 362b8b6db1ce493c4eee55479e5eaafa | over-to-private-sector#recipe=similar-items&sourcecontentid=362b8b6db1ce493c4eee55479e5eaafa) Hand CVE Over to the Private Sector by Brian Martin Jan 2 |
| md5 | 3e902b4f0859291fd322f90ebc26a2b7 | poses-ai-security-gaps#recipe=similar-items&sourcecontentid=3e902b4f0859291fd322f90ebc26a2b7) Europe's Multilingual Reality Exposes AI Security Gaps by |
| md5 | 72c338b2deafd2cb61496d84135508f8 | overnment-cyberattacks#recipe=similar-items&sourcecontentid=72c338b2deafd2cb61496d84135508f8) Shutdown Sparks 85% Increase in US Government Cyberattack |
From the original article
8 min read at darkreading.com
One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change.
By Robert Lemos · darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.