A financially motivated threat actor is using open-source AI agent frameworks to automate attacks against hundreds of online retailers, installing payment-card skimmers that have stolen more than 600,000 credit card records.
Disclosed 23 September 2026 · Record updated 1 October 2026
Over 600,000 credit card records stolen from more than 100 compromised online retail websites via skimmer malware deployed using AI agent frameworks.
IncidentsA financially motivated attacker is using open-source agent frameworks to plant payment skimmers on more than 100 retail sites, BleepingComputer reported on 23 September 2026.
23 Sept 2026
