Open-Source AI Tools Help Hacker Steal 600,000 Credit Cards from Major Companies

Cheap AI Tools Lower the Bar for Cybercriminals

A cybercriminal exploited three open-source AI tools to infiltrate a Fortune 500 hospitality firm, a major U. S. airline, and over 25 other organizations, siphoning more than 600,000 credit card records. The attacker deployed automated skimming software to harvest sensitive payment data, leaving a trail of digital footprints that security firm Gambit later traced. Gambit recovered the hacker’s staging server, enabling them to piece together the full scope of the data-theft operation.

The perpetrator leveraged freely available AI frameworks to automate reconnaissance and exploit vulnerabilities, keeping operational costs minimal. Gambit’s analysis revealed the attacker’s average expense was just $25 per completed scan, highlighting how accessible tools are lowering the barrier for cybercrime. The hacker’s infrastructure included cloud-based servers and open-source scripts to bypass security measures, targeting e-commerce platforms and airline booking systems.

Open-source AI harnesses like large language models and automated exploitation tools allowed the hacker to scale operations efficiently. These tools enabled rapid scanning of web applications, identification of payment gateways, and deployment of skimmers without requiring advanced technical skills. Gambit’s report emphasized the alarming trend of cybercriminals repurposing AI for profit-driven attacks. „The democratization of AI is a double-edged sword,” said a Gambit analyst. „It empowers defenders but also arms attackers with unprecedented precision.”

How Did Gambit Uncover the Attack?

Gambit gained access to the hacker’s staging server through an undisclosed vulnerability, allowing them to analyze logs, scripts, and stolen data. The firm reconstructed the attack timeline, identifying 25+ victims across retail, travel, and hospitality sectors. Investigators also uncovered the hacker’s monetization strategy: selling card data on dark web markets and using compromised accounts to make fraudulent purchases. The total financial impact remains unclear, but industry experts warn the breach could cost victims millions in fraud and remediation.

The incident underscores the growing sophistication of AI-driven cyberattacks and the urgent need for businesses to bolster their defenses. Security experts recommend adopting AI-powered detection systems and enforcing stricter access controls to counter such threats. As open-source tools become more advanced, Gambit predicts a surge in similar breaches unless organizations prioritize proactive security measures.

Frequently Asked Questions

What open-source tools did the hacker use? The attacker employed three unnamed open-source AI frameworks for scanning, exploitation, and data harvesting. Specific tools were not disclosed by Gambit.

How much did the cybercriminal spend per attack? The hacker’s average cost per scan was $25, reflecting the low barrier to entry for AI-powered cybercrime.

How many organizations were affected? Over 25 companies, including a Fortune 500 hospitality firm and a major U. S. airline, were compromised in the operation.