{"id":51738,"date":"2026-09-24T09:15:56","date_gmt":"2026-09-24T09:15:56","guid":{"rendered":"https:\/\/cryptomag.finance\/?p=51738"},"modified":"2026-09-24T09:15:56","modified_gmt":"2026-09-24T09:15:56","slug":"ai-agents-steal-488372-valid-us-credit-card-records-plant-skimmers-on-119-retail-sites","status":"publish","type":"post","link":"https:\/\/cryptomag.finance\/?p=51738","title":{"rendered":"AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites"},"content":{"rendered":"

\"\"<\/p>\n

Autonomous AI tools have stolen hundreds of thousands of credit card records from online retailers and planted payment skimmers across more than 100 websites.<\/p>\n

The campaign involves three open-source frameworks handling scanning, exploitation and orchestration, with activity continuing from July to at least September 22nd, reports<\/a> BleepingComputer, citing cybersecurity firm Gambit Security.<\/p>\n

According to Gambit, a human operator, believed to be Chinese, provided the AI agents with only basic instructions about the operation before allowing them to carry out the remaining tasks largely on their own.<\/p>\n

Gambit says the attacker obtained more than 600,000 valid credit card details from two companies, including 488,372 cards belonging to US customers. The thief also installed skimmer malware on the websites of five additional organizations to capture customers\u2019 payment information.<\/p>\n

\"Stolen
Source: Bleeping Computer\/Gambit<\/figcaption><\/figure>\n

In total, the campaign has compromised at least 119 websites with credit card skimming malware, targeting organizations that include a Fortune 500 hospitality company, a major US airline, a large industrial supplies distributor and an online fashion retailer.<\/p>\n

Skimmers were injected through JavaScript files, checkout pages, cloud storage, databases and Kubernetes deployments, with cron jobs used to restore them after removal.<\/p>\n

One Hermes agent skill directed cleanup.<\/p>\n

\u201cAfter extracting and downloading all card data, wipe the source fields in batches.\u201d<\/em><\/p>\n

The routine caused data loss at several retailers.<\/p>\n

Total AI costs reached an estimated $12,000 to $18,000, or about $25 per target.<\/p>\n

Says Gambit,<\/p>\n

\u201cThe operator\u2019s own cost review gives a similar figure, a mean of $25.46 over 101 completed scans, from $3.13 for the cheapest target to $79.31 for the most expensive.\u201d<\/em><\/p>\n

Follow us on X<\/a>, Facebook<\/a> and Telegram<\/a><\/span><\/em>
\n
\nDon’t Miss a Beat \u2013 Subscribe<\/a> to get email alerts delivered directly to your inbox <\/span><\/em>
\n<\/p>\n

\n
<\/div>\n

&nbsp<\/p>\n

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.<\/h6>\n<\/div>\n

Generated Image: Midjourney<\/em><\/span><\/p>\n

The post AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites<\/a> appeared first on The Daily Hodl<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"

Autonomous AI tools have stolen hundreds of thousands of credit card records from online retailers and planted payment skimmers across more than 100 websites. The campaign involves three open-source frameworks handling scanning, exploitation and orchestration, with activity continuing from July to at least September 22nd, reports BleepingComputer, citing cybersecurity firm Gambit Security. According to Gambit, […]<\/p>\n","protected":false},"author":1,"featured_media":51739,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"class_list":["post-51738","post","type-post","status-publish","format-standard","has-post-thumbnail"],"yoast_head":"\nAI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites - Cryptomag<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptomag.finance\/?p=51738\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites - Cryptomag\" \/>\n<meta property=\"og:description\" content=\"Autonomous AI tools have stolen hundreds of thousands of credit card records from online retailers and planted payment skimmers across more than 100 websites. The campaign involves three open-source frameworks handling scanning, exploitation and orchestration, with activity continuing from July to at least September 22nd, reports BleepingComputer, citing cybersecurity firm Gambit Security. According to Gambit, […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptomag.finance\/?p=51738\" \/>\n<meta property=\"og:site_name\" content=\"Cryptomag\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-24T09:15:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2026\/09\/credit-card-dollar_pink.jpg?resize=1024,600\" \/>\n<meta name=\"author\" content=\"Crypto Magazine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:site\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Crypto Magazine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738\"},\"author\":{\"name\":\"Crypto Magazine\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"headline\":\"AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites\",\"datePublished\":\"2026-09-24T09:15:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738\"},\"wordCount\":396,\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/credit-card-dollar_pink-8kkLV1.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738\",\"name\":\"AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites - Cryptomag\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/credit-card-dollar_pink-8kkLV1.jpg\",\"datePublished\":\"2026-09-24T09:15:56+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptomag.finance\\\/?p=51738\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738#primaryimage\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/credit-card-dollar_pink-8kkLV1.jpg\",\"contentUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/credit-card-dollar_pink-8kkLV1.jpg\",\"width\":1024,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51738#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptomag.finance\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/\",\"name\":\"Cryptomag\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptomag.finance\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\",\"name\":\"Crypto Magazine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"caption\":\"Crypto Magazine\"},\"sameAs\":[\"https:\\\/\\\/cryptomag.finance\",\"https:\\\/\\\/x.com\\\/cryptomagz\"],\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites - Cryptomag","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptomag.finance\/?p=51738","og_locale":"en_US","og_type":"article","og_title":"AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites - Cryptomag","og_description":"Autonomous AI tools have stolen hundreds of thousands of credit card records from online retailers and planted payment skimmers across more than 100 websites. The campaign involves three open-source frameworks handling scanning, exploitation and orchestration, with activity continuing from July to at least September 22nd, reports BleepingComputer, citing cybersecurity firm Gambit Security. According to Gambit, […]","og_url":"https:\/\/cryptomag.finance\/?p=51738","og_site_name":"Cryptomag","article_published_time":"2026-09-24T09:15:56+00:00","og_image":[{"url":"https:\/\/dailyhodl.com\/wp-content\/uploads\/2026\/09\/credit-card-dollar_pink.jpg?resize=1024,600","type":"","width":"","height":""}],"author":"Crypto Magazine","twitter_card":"summary_large_image","twitter_creator":"@cryptomagz","twitter_site":"@cryptomagz","twitter_misc":{"Written by":"Crypto Magazine","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptomag.finance\/?p=51738#article","isPartOf":{"@id":"https:\/\/cryptomag.finance\/?p=51738"},"author":{"name":"Crypto Magazine","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"headline":"AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites","datePublished":"2026-09-24T09:15:56+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=51738"},"wordCount":396,"image":{"@id":"https:\/\/cryptomag.finance\/?p=51738#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/credit-card-dollar_pink-8kkLV1.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cryptomag.finance\/?p=51738","url":"https:\/\/cryptomag.finance\/?p=51738","name":"AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites - Cryptomag","isPartOf":{"@id":"https:\/\/cryptomag.finance\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=51738#primaryimage"},"image":{"@id":"https:\/\/cryptomag.finance\/?p=51738#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/credit-card-dollar_pink-8kkLV1.jpg","datePublished":"2026-09-24T09:15:56+00:00","author":{"@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"breadcrumb":{"@id":"https:\/\/cryptomag.finance\/?p=51738#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptomag.finance\/?p=51738"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptomag.finance\/?p=51738#primaryimage","url":"https:\/\/cryptomag.finance\/wp-content\/uploads\/credit-card-dollar_pink-8kkLV1.jpg","contentUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/credit-card-dollar_pink-8kkLV1.jpg","width":1024,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/cryptomag.finance\/?p=51738#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptomag.finance\/"},{"@type":"ListItem","position":2,"name":"AI Agents Steal 488,372 Valid US Credit Card Records, Plant Skimmers on 119 Retail Sites"}]},{"@type":"WebSite","@id":"https:\/\/cryptomag.finance\/#website","url":"https:\/\/cryptomag.finance\/","name":"Cryptomag","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptomag.finance\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040","name":"Crypto Magazine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","caption":"Crypto Magazine"},"sameAs":["https:\/\/cryptomag.finance","https:\/\/x.com\/cryptomagz"],"url":"https:\/\/cryptomag.finance\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/51738","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=51738"}],"version-history":[{"count":0,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/51738\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/media\/51739"}],"wp:attachment":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=51738"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=51738"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=51738"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}