Malicious AI agents steal 600K credit cards from 100+ retailers
A financially motivated threat actor deployed open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records and infecting over 100 sites with payment skimmers as of 2026-09-23. The attack represents an automated, scaled exploitation of AI technology for financial crime.