NewsPublished 23 Sep 2026

Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers

Source Bleeping Computer

Description

A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records. [...]

Impact

The compromise has resulted in the theft of over 600,000 credit card records, exposing customers to financial fraud and identity theft. Additionally, the infection of over 100 online retail sites with skimmers undermines the integrity of payment processing and damages the trustworthiness of these businesses.

Defensive guidance

Organizations should monitor vendor advisories for updates and consider enhanced security measures for payment processing systems. Since this is a large-scale campaign using AI-driven automation, targeted detection and response strategies focusing on skimmer malware and unusual transaction patterns are advisable.

Summary

The threat involves malicious use of AI agent frameworks to automate and scale attacks targeting hundreds of e-commerce sites. These attacks have successfully compromised payment systems, leading to the theft of a significant volume of credit card data and widespread deployment of skimming malware on affected websites.

References

bleepingcomputer.com/news/security/malicious-ai-agents-steal-600k-credit-cards-infect-100-plus-sites-with-skimmers/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 23 Sep 2026, 16:32 UTC

References

Community reviews