When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .
This is just the latest example of hackers turning to AI agents in an attempt to level up their attacks on unsuspecting companies and services. Snorre Fagerland, principal threat researcher at the cybersecurity company NorForge, spotted the hacker's antics when observing Carin instances that had been inadvertently exposed.
Fagerland was able to watch multiple hackers go about their business, but the Chinese-speaking hacker was the most prolific, the report says. They targeted businesses based in the United States, Canada, Australia, and Japanese e-commerce sites. Notably, the hacker didn't get into detail when commanding their legion of AI agents. Fewer than 100 Chinese characters were used, yet the agents had attempted ot break into more than 1,200 different websites as of the week ending October 18, 2026.
These agents weren't simply throwing everything at a wall and hoping it stuck, either. Security researcher Fagerland was "impressed" by some of the tactics that had been used. In one case, the AI agents scoured digital records to find infrastructure associated with their target, located a public-facing control panel, identified a weakness, and then leveraged it to force the execution of malicious commands, the Reuters report detailed. "It's not straightforward to come up with solutions like that," Fagerland told Reuters . "It's not script kiddie stuff."
Vitally, the approach of using AI agents in this way means that they can be given instructions and then left to their own devices. With no supervision required, those commanding the agents are free to turn their attention elsewhere. While SharkNinja told Reuters that the attack only impacted a site used for product support information, the rest of the AI-aided hackers had more luck. One of the hackers monitored by Gargerland stole credit card data, while another tried to steal from a cryptocurrency exchange — although it isn't clear whether they were successful.
OpenAI's rogue AI agents accessed more websites to communicate than originally believed
Suspected China-linked hackers used AI to run the first-ever end-to-end autonomous cyberattack on Taiwan's government, Israeli firm says
Hackers suspected of using AI agents for cyberattacks on South Korean banks, exposing data from about 25,000 customers
Follow Tom's Hardware on Google News , or add us as a preferred source , to get our latest news, analysis, & reviews in your feeds.
Get Tom's Hardware's best news and in-depth reviews, straight to your inbox.
Key considerations
- Investor positioning can change fast
- Volatility remains possible near catalysts
- Macro rates and liquidity can dominate flows
Reference reading
- https://www.tomshardware.com/tech-industry/artificial-intelligence/SPONSORED_LINK_URL
- https://www.tomshardware.com/tech-industry/artificial-intelligence/a-chinese-hacker-used-ai-agents-to-break-into-more-than-100-company-websites-deere-and-sharkninja-among-websites-hit-by-open-source-ai-powered-problem-solving-platform-demo#main
- https://www.tomshardware.com/membership
- Claude Code AI agent caught a crypto miner hiding on a developer’s overheating Mac
- Modder finishes nine-year Xbox 360 voltage glitch mod with a $4 microcontroller, cracks the console open
- Why Telecom Operators Are Building Their AI Strategy on Open Models
- Quad 8-pin mod protects the $8,500 RTX 5090 you can’t replace from melting
- This could be your last chance to grab an RTX 5090
Informational only. No financial advice. Do your own research.