AI-Driven Hacking Campaign Compromises 600,000 Credit Cards

• •Over 600,000 credit card records compromised from two companies.
• •Attackers used open-source AI tools, costing an average of $25 per target.
• •Payment-skimming malware was installed on at least five affected retailers.

A hacking campaign utilizing open-source AI tools has compromised over 600,000 credit card records from two online retailers. Research by Gambit Security indicates that the attackers executed 101 scans across 105 online retailers, with 27 successful breaches occurring over five days. The average cost per attack was approximately $25, with individual costs ranging from $3.13 to $79.31. Payment-skimming malware was found on five of the breached sites, indicating ongoing data theft. The campaign is financially motivated, focusing on volume rather than stealth. Gambit Security has contacted the affected companies, and the attacks have been linked to Chinese-speaking operators. The campaign highlights the increasing sophistication of cybercriminal activities due to AI technologies.