Loading story…
A financially motivated operator reportedly used open-source autonomous AI tools—Strix for vulnerability discovery, Cairn for exploitation, and Hermes for orchestration—to compromise online retailers and deploy payment-card skimmers. Gambit Security said the campaign compromised at least 27 companies during a September attack period, stole more than 600,000 payment-card records from two victims, and deployed skimmers at 19 identified victims plus more than 100 additional infected sites.
The reported intrusion chains included SQL injection, MFA bypass using exposed one-time passwords, web-shell deployment, sudo privilege escalation, NFS pivoting, AWS Secrets Manager access, and Magento database theft. The operator's records reportedly showed an average cost of $25.46 for each of 101 completed scans, despite spending an estimated $12,000–$18,000 on AI-model access; in two cases, it deleted payment-card data and database tables after exfiltration. Gambit Security notified affected organizations and worked with Shadowserver Foundation and Cloudflare to disrupt the infrastructure, but said the operator continued rebuilding it.
Track how attackers are adapting to this technology.
9 events from the most recent confirmed update back to the earliest known activity.
Cairn reportedly launched 105 attack projects and compromised at least 27 companies to varying degrees.
Strix conducted 146 deep-mode scans against 138 hosts, consuming 633 scanner-hours in 195 hours of elapsed time.
The operator reportedly spent between $12,000 and $18,000 on AI-model access through OpenRouter during the campaign period.
A financially motivated operator began an automated campaign against online retailers using the open-source AI tools Strix, Cairn, and Hermes.
Gambit Security notified affected organizations and worked with the Shadowserver Foundation and Cloudflare to dismantle attacker infrastructure. The operator reportedly rebuilt disrupted infrastructure repeatedly and continued the campaign.
A Hermes skill instructed the agent to erase payment-card fields from Magento databases after exfiltration. At a bicycle-retailer victim, the agent created staging tables and dropped 180 matching tables, including administrator-created backups.
Payment-card skimmers were confirmed at 19 named victims, with more than 100 additional infected sites identified with assistance from researcher Varys. Injection methods included altered jQuery files, poisoned S3/CDN content, Kubernetes initContainers, and recurring JBoss-directory cron jobs.
The operator reportedly exfiltrated more than 600,000 payment-card records from two victims. Overwatch Data validated the records and found that about 488,000, or 79%, belonged to U.S. cardholders.
One documented intrusion used unauthenticated SQL injection and an exposed plaintext one-time password to bypass MFA, then deployed a web shell, escalated through misconfigured sudo, and pivoted via NFS. The intrusion obtained 46 AWS Secrets Manager secrets, accessed a Magento database, and acquired a key used to decrypt stored card numbers.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Group-IB reported that the **FakeSecurity** JavaScript sniffer was used in a large Magecart-style campaign targeting Magento-based e-commerce sites, where malicious code was implanted into checkout pages to steal customers' payment card data. The activity was tied to attacker-controlled domains including `alloaypparel.com` and `firstofbanks.com`, along with compromised websites used to host payloads and lure pages. Investigators linked the skimming operation to an earlier malware campaign aimed at likely e-commerce administrators, in which spam emails and fake document-viewer landing pages delivered the **Vidar** password stealer through the **Mephistophilus** phishing kit. Group-IB said the apparent goal was to harvest administrator credentials, gain access to Magento and other e-commerce CMS panels, and then deploy the skimmer; infrastructure overlap with earlier **LokiBot** and **AZORult** activity suggests the same cybercrime group ran multiple credential-theft operations to support the card-skimming attacks.
Aug 14, 2026
A financially motivated lone attacker used AI-assisted workflows to breach a large **AWS** environment in roughly 72 hours, according to a Sygnia incident-response report, chaining weaknesses across Internet-facing applications, AWS resources, source code repositories, **CI/CD** pipelines, runtime components, and data stores. The intrusion reportedly began with the theft of an AWS access key and expanded through secrets harvesting, cloud enumeration, backdoor creation, data exfiltration, deployment pipeline abuse, runtime modification, database access, and operational disruption. To extort the unnamed global enterprise, the actor carried out mostly reversible actions including denying access to **S3** buckets, scaling **ECS** services to zero, blocking network access with ACL rules, and purging **SQS** queues. The incident reflects a broader shift from isolated malicious use of generative AI to **agentic AI** supporting larger portions of the attack chain. Research cited by OALABS and observations from Anthropic indicate attackers are using tools such as **Claude** and **OpenAI Codex** to automate reconnaissance, analyze stolen data, generate code, and adapt operations during live intrusions, lowering the barrier for less-skilled actors while helping experienced operators scale activity. Security researchers said the trend now spans multiple **MITRE ATT&CK** tactics, including reconnaissance, credential theft, malware development, and social engineering, pushing defenders to prioritize detection of AI-enabled workflows, stronger identity controls, broader visibility, and faster automated containment.
Jul 9, 2026
Security reporting and research highlighted how **AI and automation are reshaping both attacker tradecraft and defender operations**, while introducing new enterprise risk. ZDNET described research findings that **agentic AI implementations** from *ServiceNow* and *Microsoft* can be **exploitable**, warning that broadly permissioned agents could enable **lateral movement and privilege escalation** across systems of record if an attacker compromises an agent or chains between agents with different access levels; a **least-privilege** posture for agents was emphasized. Dark Reading separately reported that **AI agents are increasingly augmenting—and in some cases supplanting—human penetration testing** for “low-hanging” vulnerabilities, but that **false positives and the need for human oversight** remain material constraints as agentic testing matures. Threat-intelligence coverage also underscored the **industrialization of cybercrime** and the ecosystems enabling it. CloudSEK detailed the evolution of the English-speaking cybercriminal milieu known as **“The COM,”** tracing its roots in OG-handle trading communities and forum migrations into a service-oriented underground linked to groups such as **Lapsus$**, **ShinyHunters**, **Scattered Spider (UNC3944)**, and **Silent Ransom Group**, and associated activity spanning breaches, extortion, SIM swapping, ransomware, and crypto fraud. SC Media’s commentary similarly described a cyber underground where criminals can readily buy capabilities (credentials, tooling, automation), calling out techniques including **carding** and **ClickFix** social engineering that tricks users into running copied commands to install infostealers. Separately, Dark Reading reported allegations that the **Chronus Group** posted **2.3TB** of purported Mexican government data affecting up to **36 million** people, while Mexico’s **ATDT** disputed it as largely **repackaged data from prior breaches** and said no new sensitive accounts were identified and that impacted systems were primarily **obsolete, third-party-administered** state-level platforms.
Jun 29, 2026