Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers

Attackers with financial motives reportedly leveraged open-source AI agent tooling to automate attacks on e-commerce sites at scale. More than a hundred retail websites were seeded with payment-skimming code, resulting in the theft of roughly 600,000 shoppers' credit card records.