Gambit Says Open-Source AI Agents Helped Steal 600,000 Credit Cards From Online Retailers

A financially motivated operator used three open-source AI harnesses to attack online retailers at machine speed, stealing more than 600,000 payment-card records and leaving skimmers on more than 100 websites, Gambit Security said in an interim report published September 22. The campaign, reconstructed from a recovered staging server, shows how autonomous tooling can compress reconnaissance, exploitation and cleanup into hours while costing tens of dollars per target.