GoKawiilGambit Security finds AI-driven campaign breached 27 e-commerce sites for $25 each
Gambit Security reported that over five days in September, a Chinese-speaking attacker used three AI agent frameworks and both open-weight and public AI models to target 105 e-commerce sites, compromising at least 27, including a Fortune 500 company. The attackers stole over 600,000 payment card records from two targets and installed skimmers on five others, spending an average of $25.46 per successfully breached target. Separately, Silverfort researchers said a lab test using Claude Opus achieved full domain compromise from initial access in eight minutes for about $12.