AI tools help hacker break in for $25 per target

Summary

Israeli security firm Gambit reports that an attacker used open-source AI harnesses, Strix, Cairn and Hermes, to target 105 online retailers over five days and compromised 27 of them. The attacks took about $25 each on average, with AI model access through OpenRouter, and yielded 600,000 active credit card details from two businesses plus card skimmer scripts installed at five more.

Related items

• MediumGHSA-68g8-gh8f-7rhg: pgEdge RAG Server discloses part of the configured provider credential through API error messagesSame vendor · GitHub Advisory Database
• InfoHow Amplitude ships product improvements in 1–2 days with OpenAISame vendor · OpenAI Blog
• InfoEndor Labs + OpenAI: Strengthening the Defense Factory With Accelerated Remediation | Endor LabsSame vendor · Endor Labs Blog
• InfoJensen Huang built an AI kingdom. Now he’s gone, will Nvidia’s ramparts be breached?Same vendor · The Guardian Technology
• LowAI chatbots are recommending fake retail websites, study findsSame vendor · The Verge (AI)