Gambit

AI agents are attacking online shops at scale. According to security firm Gambit, a campaign running since at least July has targeted hundreds of companies and injected malicious code into at least 119 websites. The report suggests automated AI-driven fraud is moving from isolated incidents to industrial-scale operations against e-commerce.

Security firm Gambit reports that AI-powered agents were used to steal roughly 600,000 credit cards, with the operation costing about $25 per target. The claim highlights how cheap and scalable automated AI tools have made large-scale credit card theft, raising alarm among cybersecurity experts about the growing use of AI agents for financial crime.

Security company Gambit reports that an attacker used three open-source AI agents to breach 27 companies and steal more than 600,000 credit card records. According to the firm, each automated scan cost roughly $25, making the operation cheap and highly scalable. The case is raising alarm about how easily accessible AI tools can be repurposed for large-scale cybercrime against financial targets.