Strix

Malicious AI Agents Steal Data from 600,000 Cards and Infect 119 Sites with Skimming Malware

A financially motivated attacker used open-source AI agent frameworks to attack hundreds of online stores, steal more than 600,000 card records, and deploy skimming malware on at least 119 sites. The campaign shows that lowering the cost of automation expands the scale of attacks, with the potential to cause operational damage by deleting data after stealing it.