Researcher: a Chinese-speaking hacker used AI agents to target 1,200+ websites and breach 100+ entities, including Deere and SharkNinja, spending ~$5,000 total

The cost of advanced cyberattacks drops significantly, making them accessible to more threat actors.

A cybersecurity researcher has observed a Chinese-speaking hacker utilizing AI agents to conduct sophisticated cyberattacks. The campaign targeted over 1,200 websites, successfully breaching more than 100 entities. Among the compromised organizations are well-known companies like Deere and SharkNinja. The attacker reportedly spent approximately $5,000 on these operations, leveraging AI agents for reconnaissance and exploitation. The researcher detailed these findings over the past couple of weeks, highlighting the efficiency and low cost of AI-driven cybercrime. The specific methods and AI tools employed remain under investigation, but the scale and success of the attacks underscore a new threat landscape.

The successful deployment of AI agents by a single, low-budget actor suggests a maturation of AI in offensive cybersecurity. This approach automates complex tasks, potentially lowering the technical barrier to entry for sophisticated attacks. The low reported expenditure indicates that these tools are becoming economically viable for widespread criminal use, moving beyond state-sponsored or highly resourced groups.

This development poses a significant challenge for defenders, as AI-powered agents can operate at greater speed and scale than traditional methods. Organizations must now consider AI-driven reconnaissance and exploitation as a tangible threat, necessitating advancements in AI-based defensive strategies. The ability of these agents to adapt and evade detection also implies a potential arms race between offensive and defensive AI technologies.