AI tools help hacker break in for $25 per target
AI-driven campaign compromised 27 of 105 retailers and stole about 600,000 card numbers.
Israeli security firm Gambit reports that an attacker used open-source AI harnesses to hit 105 online retailers over five days and compromise 27. From two businesses the attacker took about 600,000 active credit card details, and card-skimmer scripts were installed at five more, with additional access to unnamed major companies. Gambit identifies Strix for vulnerability search, Cairn for autonomous exploitation, and Hermes for campaign orchestration, with model access via OpenRouter. An August 25 balance showed $7,005 spent over four weeks, about $25 per target, ranging from $3.13 to $79.31.
- An attacker hit 105 retailers in five days and compromised 27.
- Two businesses lost about 600,000 active credit card numbers.
- Card-skimmer scripts were installed on five additional stores.
- Strix, Cairn, and Hermes automated search, exploitation, and orchestration.
- OpenRouter spend was about $7,005, roughly $25 per target.
- ATT&CK
- T1595.002 Vulnerability ScanningT1190 Exploit Public-Facing ApplicationT1056.003 Web Portal Capture
- Organizations
- GambitOpenRouter
From the original article
1 min read at csoonline.com
It’s cheap to set yourself up as a hacker these days using AI. Someone attacked 105 online retailers over a period of five days, compromising 27 of them — all for an average of $25 per attack, according to research by Israeli security company Gambit. But the attacks have been going on for much longer.
csoonline.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.