The campaign leverages three open source AI harnesses: Strix for vulnerability scanning, Cairn for autonomous penetration testing and attack execution, and Hermes for orchestration and persistence. Between August and September 2026, the attacker ran hundreds of scans and launched over 100 attack projects, compromising at least 27 companies. The attacker used AI to dynamically select attack paths and automate exploitation, resulting in varied tactics across victims. Stolen credit card data exceeded 600,000 records, primarily from US victims. Skimmer scripts were injected into checkout pages via multiple vectors including JavaScript files, Google tag blocks, AWS S3 buckets, and Kubernetes containers. The attacker maintained persistence by reappending skimmers after removal and deleting evidence from victim databases. The campaign highlights the emerging threat of AI-driven autonomous attacks at marginal operational cost.

The campaign resulted in the theft of over 600,000 unexpired credit card records, including nearly 488,000 from US customers, posing significant financial and privacy risks. Multiple online retailers had skimmer scripts injected, exposing customers to payment data theft. Several companies, including a Fortune 500 hospitality firm and US-based businesses in various sectors, suffered unauthorized access. The rapid compromise timeline (hours to a day) and dynamic attack methods increased the difficulty of detection and response. The use of AI automation lowered the attacker's operational costs and increased attack scale and persistence.

No official vendor advisory or patch information is provided for this campaign. As the attack exploits custom code vulnerabilities and injects skimmer scripts, affected organizations should conduct thorough security assessments of their web applications and infrastructure. Immediate actions include scanning for unauthorized scripts, verifying integrity of checkout page code, and reviewing access logs for suspicious activity. Organizations should also enhance monitoring for anomalous database deletions and unauthorized cron jobs. Given the use of open source AI tools by attackers, defenders should consider deploying AI-assisted detection and response capabilities. Patch status is not yet confirmed — check vendor advisories for any updates related to exploited vulnerabilities or compromised platforms.