CampaignPublished 24 Sep 2026

AI-Powered Campaign Targets Hundreds of Online Retailers

Source SecurityWeek

Description

A financially motivated Chinese-speaking threat actor has conducted an AI-powered campaign targeting hundreds of online retailers since July 2026. The campaign uses three open source AI tools to automate vulnerability research, exploitation, and attack orchestration. Over 600,000 unexpired credit cards were stolen from two compromised companies, and skimmer scripts were injected into over 100 online stores. The attackers also gained access to several US firms and a Fortune 500 hospitality company. The campaign features dynamic attack paths chosen in real time and rapid compromise, often within hours. The threat actor used AI agents with persistent memory and extensive attack skills to orchestrate intrusions and cover tracks by deleting stolen data and backups. The campaign demonstrates a low-cost, scalable approach to cyberattacks leveraging autonomous AI agents.

Impact

The campaign resulted in the theft of over 600,000 unexpired credit card records, including nearly 488,000 from US customers, posing significant financial and privacy risks. Multiple online retailers had skimmer scripts injected, exposing customers to payment data theft. Several companies, including a Fortune 500 hospitality firm and US-based businesses in various sectors, suffered unauthorized access. The rapid compromise timeline (hours to a day) and dynamic attack methods increased the difficulty of detection and response. The use of AI automation lowered the attacker's operational costs and increased attack scale and persistence.

Defensive guidance

As the attack exploits custom code vulnerabilities and injects skimmer scripts, affected organizations should conduct thorough security assessments of their web applications and infrastructure. Immediate actions include scanning for unauthorized scripts, verifying integrity of checkout page code, and reviewing access logs for suspicious activity. Organizations should also enhance monitoring for anomalous database deletions and unauthorized cron jobs. Given the use of open source AI tools by attackers, defenders should consider deploying AI-assisted detection and response capabilities.

Summary

The campaign leverages three open source AI harnesses: Strix for vulnerability scanning, Cairn for autonomous penetration testing and attack execution, and Hermes for orchestration and persistence. Between August and September 2026, the attacker ran hundreds of scans and launched over 100 attack projects, compromising at least 27 companies. The attacker used AI to dynamically select attack paths and automate exploitation, resulting in varied tactics across victims. Stolen credit card data exceeded 600,000 records, primarily from US victims. Skimmer scripts were injected into checkout pages via multiple vectors including JavaScript files, Google tag blocks, AWS S3 buckets, and Kubernetes containers. The attacker maintained persistence by reappending skimmers after removal and deleting evidence from victim databases. The campaign highlights the emerging threat of AI-driven autonomous attacks at marginal operational cost.

References

securityweek.com/ai-powered-campaign-targets-hundreds-of-online-retailers/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 24 Sep 2026, 13:02 UTC

References

Community reviews