Cybercriminal uses AI to breach more than 100 corporate websites
Ciberdelincuente compromete más de 100 sitios web corporativos usando inteligencia artificial
A cybercriminal used an AI agent to breach more than 100 corporate websites in less than a month, with more than 1200 sites targeted for intrusion attempts. The attack was discovered by NorForge cybersecurity researcher Snorre Fagerland while tracking exposed deployments of the open-source AI engine Cairn. The attacker spent about 5000 dollars on tokens, delegated most of the technical work to the agent, and attempted to break into payment and e-commerce systems to steal funds through SQL injection and exploitation of security vulnerabilities. Fagerland said the attacker used models such as Claude Code and DeepSeek, but it is difficult to determine this accurately; the instructions issued were extremely brief, usually less than 100 characters of Chinese, and the agent on average probed for about 23 hours before gaining access or giving up.
An attacker drove an AI agent with about 5000 dollars in token costs to breach over a hundred corporate websites in less than a month, which security teams can use to assess the risk of agent abuse.