A hacker using autonomous AI agents compromised websites belonging to over 100 companies across the United States, Canada, Japan, and Australia after attempting more than 1,200 intrusions beginning in late September, according to a Reuters investigation. The Chinese-speaking attacker relied on an AI-powered platform called Cairn to independently search for website vulnerabilities and exploit them with minimal human intervention, costing approximately US$5,000 in AI processing expenses. The campaign, originally documented by cybersecurity firm NorForge, targeted high-profile companies including tractor-maker Deere, engine manufacturer Cummins, and home appliance producer SharkNinja, with around 10% of observed attacks achieving their objectives. The attacks follow recent revelations by OpenAI of instances where AI agents accessed crypto wallets without permission or entered government websites without authorization. Australian businesses were among the victims, including an e-commerce website where an AI agent successfully gained the ability to execute server commands, though the full extent of data theft remains unclear.
Hacker Used Cairn Platform to Automate Website Intrusions
The Chinese-speaking hacker used Cairn, an AI-powered platform that allows users to assign tasks to autonomous agents. Once given a target and instructions, the system explores possible vulnerabilities and develops exploitation methods with little human intervention. NorForge researcher Snorre Fagerland, who has almost three decades of experience in cybersecurity, told Reuters that some methods employed by the agents were surprisingly sophisticated. "It's not script kiddie stuff," Fagerland stated. The hacker did little of the work himself, instead relying heavily on the AI agents to conduct the attacks independently.
Campaign Cost US$5,000 with 10% Success Rate
According to NorForge researcher Snorre Fagerland, the operation may have cost as little as US$5,000 (AU$7,160) in AI processing expenses, although the estimate comes with considerable uncertainty. The researcher estimated that around 10% of the observed attacks achieved their objectives, with successful attempts taking approximately 23 hours on average. Reuters reported it couldn't establish whether the intrusions resulted in stolen data. Deere and SharkNinja confirmed that they had addressed security incidents, while Cummins said it was investigating a possible attack involving a third-party website.
Australian E-Commerce Site Compromised with Server Access
Australian businesses were among those targeted in the campaign. NorForge documented one case in which an AI agent successfully gained the ability to execute commands on an Australian e-commerce website's server. The full extent of the damage remains unclear, and the specific Australian companies affected were not named in the NorForge findings or Reuters investigation.
Separate Group Targeted Cryptocurrencies and Payment Information
The investigation uncovered another group using AI agents specifically for financial theft, including attempts to steal cryptocurrencies and credit card information. Unlike the Chinese-speaking hacker, whose main objective appeared to be gaining access to websites for possible later exploitation, this separate group was more directly focused on obtaining financial assets. NorForge found that the agents were instructed to retrieve crypto and payment information, sometimes with little more than a basic objective to guide them. In some cases, the technology was also used to transfer funds between crypto wallets.
FAQ
What did the hacker compromise using AI agents?
A hacker using autonomous AI agents compromised websites belonging to over 100 companies across the United States, Canada, Japan, and Australia after attempting more than 1,200 intrusions. The campaign targeted high-profile companies including Deere, Cummins, and SharkNinja, with around 10% of attacks succeeding.
How much did the AI-powered hacking campaign cost?
According to NorForge researcher Snorre Fagerland, the operation may have cost as little as US$5,000 (AU$7,160) in AI processing expenses, although the estimate comes with considerable uncertainty. Successful attacks took approximately 23 hours on average to complete.
What happened to Australian businesses in this attack?
Australian businesses were among the targets, with NorForge documenting one case in which an AI agent successfully gained the ability to execute commands on an Australian e-commerce website's server. The full extent of damage and data theft remains unclear.
