AI Platform Cairn Abused to Hack Over 100 Organizations

Cairn is an open source AI platform designed as a general-purpose problem-solving engine capable of coordinating AI agents to achieve predefined goals. Threat actors have leveraged Cairn to automate malicious operations, including persistent access and financial theft, by orchestrating multiple attack projects. Norforge identified three distinct malicious clusters abusing Cairn: the largest cluster uses Chinese language and targets e-commerce and payment infrastructure in the US, Japan, and Australia, aiming for persistent access via webshells; the second cluster focuses on credit card and cryptocurrency theft targeting merchant payment and gray-market sites, with some African commerce targets; the third cluster targets e-commerce sites for shell, admin panel, and database access. The attackers automated validation and ranking of targets using Microsoft’s Playwright framework before feeding them to Cairn. Approximately 10% of attack attempts were successful, with hundreds of secrets exposed and 11% verified as valid. The abuse of Cairn has impacted over 100 organizations, including major US companies.

The abuse of Cairn by multiple threat actors has resulted in persistent unauthorized access to targeted platforms, financial theft including credit card and cryptocurrency fraud, and exposure of sensitive secrets. The attackers achieved roughly a 10% success rate in their attempts, compromising over 100 organizations globally, including major US companies. The persistent access via webshells and administrative credentials increases the risk of long-term exploitation and monetization of compromised systems. The financial and operational impacts on affected organizations could be significant, given the targeting of payment infrastructures and e-commerce platforms.

No specific patch or official remediation guidance is provided for this threat. Organizations should review their exposure to the Cairn platform and related AI automation tools, secure any exposed panels or dashboards, and monitor for unauthorized access or webshells. Given the nature of the abuse, securing administrative access, rotating credentials, and validating secrets exposed in any related systems are recommended. Since Cairn is open source and not a cloud service, remediation depends on the affected organizations’ security controls. Patch status is not yet confirmed — check vendor advisories or community updates for any emerging fixes or mitigations.