AI-Powered Campaign Targets Hundreds of Online Retailers
A threat actor is using autonomous AI agents in an ongoing campaign targeting hundreds of online retailers, cybersecurity outfit Gambit reports.
Active since July, the campaign relies on three AI harnesses to automate the attack chain, including vulnerability research, exploitation, and orchestration.
“Between 10 and 15 September alone, 105 attack projects were launched, and at least 27 companies were compromised to varying degrees,” Gambit says.
The hackers stole information from over 600,000 unexpired credit cards from two of the compromised companies and injected skimmer scripts into five online stores.
Additionally, they gained some access to a Fortune 500 hospitality company and to three US firms, including an airline, a private industrial supplies distributor, and an online fashion retailer.
“The campaign goes back further, and has impacted at least tens of other companies since July 2026. Where access was achieved, it usually took less than a day, and in many...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
