Hacker's AI agents breached 100+ sites at $50 each, NorForge says

Snorre Fagerland of NorForge counted more than 100 breached corporate sites against 1,200+ attempted, at roughly $50 of tokens per successful hack.

The campaign ran on Cairn, an open-source hacking agent platform, with a worker string NorForge reads as Claude Code calling DeepSeek V4.1 Flash.

Each successful intrusion took the agents 23 hours; victims include Deere, SharkNinja and Cummins across the US, Canada, Australia and Japan since September 25.

A Chinese-speaking hacker broke into websites belonging to more than 100 companies while leaving nearly all the work to AI agents, according to a Reuters exclusive published Monday.

Snorre Fagerland, principal threat researcher at NorForge, said he watched the agents attempt more than 1,200 sites across the US, Canada, Australia and Japan starting September 25. The named victims he confirmed to Reuters are farm equipment maker Deere, appliance company SharkNinja and engine manufacturer Cummins. Each successful intrusion took the agents roughly 23 hours. Fagerland put the full bill at $5,000 in tokens, or roughly $50 per successful hack.

The operator wrote their instructions in fewer than 100 Chinese characters: find a way to run code on each site, then plant an uploader web shell. From there the agents worked unsupervised. Fagerland had assumed hacking agents would still need a human looking over their shoulder; this campaign showed otherwise.

The campaign ran on Cairn, an open-source AI problem-solving platform popular with hackers that coordinates agents to probe a target, for weaknesses and attempt entry. Fagerland found it after scanning the web for inadvertently exposed Cairn panels; by around October 2 he had identified two dozen such instances being used for malicious activity. All of the operator's tasks ran under a worker named claudecode_deepseek-v4.1-flash, which NorForge reads as Anthropic's Claude Code calling DeepSeek's low-cost V4.1 Flash model, as The Web summarized .

"It's not script kiddie stuff," Fagerland told Reuters.

The disclosure lands in the middle of a busy stretch for AI cybersecurity coverage on our tracker, the same week Microsoft rolled out Guardian Agents that explicitly treat AI agents as insider threats.

Shared on Bluesky by 1 AI expert

Eileen Clancy 🧿 @clancyny.bsky.social amplified @raphae.li Scoop: We looked over the shoulder of a Chinese-speaking hacker as they used AI agents to compromise more than 100 sites, including digital properties belonging to tractor maker Deere and appliance firm SharkNinja. … View on Bluesky →

Scoop: We looked over the shoulder of a Chinese-speaking hacker as they used AI agents to compromise more than 100 sites, including digital properties belonging to tractor maker Deere and appliance firm SharkNinja. …

Originally reported by reuters.com

Original headline: Reuters: Chinese Hacker Breached 100+ Firms Including Deere and Cummins for $5K Using Claude Code and DeepSeek Agents