started · updated
AI Agents used by hackers to breach over 100 corporate networks
A single Chinese-speaking hacker has utilized autonomous AI agents to conduct a widespread cyberattack, targeting over 1,200 websites and successfully breaching approximately 100 corporate networks. The operation, which began around September 25, relied heavily on the Cairn open-source AI platform to automate the reconnaissance and exploitation phases of the attacks.
Researchers from NorForge identified that the attacker used a combination of DeepSeek and Anthropic models to execute the campaign. The offensive was highly cost-effective, costing an estimated $5,000 in computing tokens, which translates to roughly $50 per successful breach. The automated agents were capable of spending hours independently probing targets for vulnerabilities, such as searching for exposed control panels or analyzing digital records to find entry points.
Among the targeted entities were major companies including Deere, Cummins, and SharkNinja. While Deere reported no signs of sensitive data access and SharkNinja stated the threat to a product support site was controlled, Cummins is investigating a potential breach involving a third-party vendor's website. The incident highlights a shift toward 'agentic' cybercrime, where AI can operate with minimal human intervention to scale complex intrusions.
Entities
Anthropic · Cairn · Cummins · DeepSeek · Deere · Jessica Ji · NorForge · SharkNinja
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 6 SOURCES] The estimated cost per successful corporate breach was $50. www.dagens.com · www.heftig.de · www.epochtimes.com · fortune.com · www.technice.com.tw · +1 more
- [● 3 SOURCES] The hacker used Chinese-language instructions to command the AI. www.epochtimes.com · www.technice.com.tw · www.tekedia.com
- [● 6 SOURCES] The attacker used a combination of DeepSeek and Anthropic models. www.dagens.com · www.heftig.de · fortune.com · www.technice.com.tw · vtv.vn · +1 more
- [● 7 SOURCES] A hacker used AI agents to target over 1,200 websites. www.dagens.com · www.heftig.de · www.epochtimes.com · fortune.com · www.technice.com.tw · +2 more
- [● 6 SOURCES] The offensive cost approximately $5,000 in computing tokens. www.dagens.com · www.heftig.de · www.epochtimes.com · fortune.com · www.technice.com.tw · +1 more
- [● 3 SOURCES] The attack began on September 25. www.epochtimes.com · fortune.com · www.technice.com.tw
- [● 7 SOURCES] The automated attacks successfully breached approximately 100 corporate networks. www.dagens.com · www.heftig.de · www.epochtimes.com · www.tekedia.com · fortune.com · +2 more
- [● 6 SOURCES] Deere, Cummins, and SharkNinja were among the companies targeted. www.dagens.com · www.heftig.de · www.epochtimes.com · fortune.com · www.technice.com.tw · +1 more