{"data":{"id":"07664e8d-bf52-4d74-9af3-b587e1f2d28b","title":"Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers","summary":"A financially motivated threat actor is using open-source AI agent frameworks, Strix, Cairn and Hermes, to attack online retailers at scale. Gambit reports that the campaign compromised at least 119 websites with credit card skimmers and stole more than 600,000 valid card details from two companies. Estimated total costs of $12,000 to $18,000 work out to an average of about $25 per target.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.bleepingcomputer.com/news/security/malicious-ai-agents-steal-600k-credit-cards-infect-100-plus-sites-with-skimmers/","publishedAt":"2026-09-23T16:20:54.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["claude-opus-4.6","OpenRouter","Strix","Cairn","Hermes"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-23T16:20:54.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}