GoKawiilGambit finds AI-agent campaign stole 600,000 card records from online retailers
Cybersecurity startup Gambit says a financially motivated threat actor has been using open-source AI agent tools since July to attack online retailers at scale, breaching at least 27 companies in a five-day span and launching over 100 attacks. The operation reportedly stole more than 600,000 valid card records from two companies and planted skimmer malware on five others, using three tools—Strix for scanning, Cairn for exploitation, and Hermes, powered by Claude Opus 4.6, for orchestration and tactical decisions.