A Chinese-speaking criminal used three open-source AI tools to conduct at least 105 attacks against companies, compromising at least 27, including a Fortune 500 hospitality firm and a major US airline. The largely autonomous campaign stole more than 600,000 payment-card records, installed card-skimming software and sometimes risked operational disruption through data deletion.

The tools divided the work between vulnerability discovery, exploitation and orchestration, with the operator supplying 1,951 prompts across 260 sessions. The campaign cost an estimated $12,000–$18,000 overall, averaging $25.46 per completed scan; one documented breach involved SQL injection, a stolen one-time password, a web shell, privilege escalation and the theft of 46 secrets from AWS-related systems.