AI-Driven Hacker Breaches Over 100 Company Websites Worldwide

A hacker has successfully broken into the websites of over 100 companies in several countries using artificial intelligence. This alarming trend was highlighted in a Reuters investigation published on October 19.

The operation targeted businesses in the United States, Canada, Australia, and Japan. Among the affected companies are Deere, a farm equipment manufacturer, SharkNinja, a home appliance maker, and Cummins, an engine manufacturer.

The hacker utilized AI to automate the process of finding and exploiting weaknesses in these websites, requiring minimal human involvement. Snorre Fagerland, a threat researcher at cybersecurity firm NorForge, observed the hacker’s activities over several weeks.

The investigation revealed that the hacker used an open-source AI platform called Cairn to control automated agents. The commands given to these agents were surprisingly brief, needing fewer than 100 Chinese characters to initiate complex operations. These agents spent hours probing the targeted websites for security flaws, with some successful breaches taking about 23 hours to achieve.

The total estimated cost of this cyber campaign was around $5,000, which translates to roughly $50 for each successful breach. However, the actual damage caused to the affected companies was reported to be limited, despite the confirmed breaches.

This incident underscores the growing risks organizations face as AI tools make it easier for cybercriminals to launch attacks. Companies are urged to enhance their security measures, including better monitoring of unusual activities and improving their ability to detect automated hacking attempts.

As AI technology evolves, cybersecurity experts warn that attacks may become quicker and easier to execute. This situation places pressure on businesses, regulators, and technology developers to keep security measures up to date with the changing landscape of cyber threats.