Autonomous artificial intelligence agents have breached the websites of more than 100 commercial entities after probing over 1,200 targets worldwide in an automated cyber operation costing approximately $5,000, or roughly Rs 4.5 lakh. The campaign, which targeted e-commerce platforms across the United States, Canada, Australia, and Japan, has brought renewed scrutiny to the expanding scale and lowering economic barriers of automated online attacks, even as affected major brands reported that no core corporate data theft had been confirmed.
Automated Exploitation Targets Global Retail Platforms
The widespread intrusion campaign was uncovered by Snorre Fagerland, a researcher at cybersecurity firm NorseForge, who identified that the attacker delegated vulnerability discovery and system exploitation directly to autonomous software programs. By programming the agents with predefined instructions to scan network architectures and exploit uncovered weaknesses, the perpetrator eliminated the need to execute individual breaches manually.
Among the high-profile organisations caught in the sweep were industrial equipment manufacturer John Deere, consumer appliance maker SharkNinja, and power systems firm Cummins. The deployment revealed how artificial intelligence systems can parse complex technical data and perform repetitive testing around the clock without manual supervision, allowing small-scale operators to multiply their operational reach across diverse commercial sectors.
Low Operational Costs Expand Attack Velocity
The offensive commenced on September 25, focusing heavily on retail platforms across four major economies. Analysis of the operation revealed that successful breaches took an average of 23 hours to compromise target architectures. More notably, the estimated operational expenditure stood at approximately $50, or Rs 4,500, per compromised company, underscoring the shift toward high-volume, low-cost intrusion methods.
Security analysts observed that such reduced expenditure threatens to transform corporate exposure. Historically, scanning hundreds of proprietary networks and executing tailor-made exploits demanded extensive technical labour, dedicated human teams, and expensive computing time. By transferring these phases to autonomous scripts, bad actors can deploy distributed attacks simultaneously across international targets on modest budgets, increasing the frequency of system probes facing internet-facing businesses.
Target Firms Contain Threats and Review Vendor Systems
Following the disclosure, the affected enterprises outlined containment measures and clarified the scope of the incident. John Deere stated that it instituted technical safeguards immediately and detected no evidence indicating the extraction of sensitive corporate or customer data. SharkNinja confirmed that the targeted system held only product-support materials and verified that the breach had been contained.
Cummins disclosed that it is reviewing an intrusion directed at an online platform operated by a third-party service provider. Cybersecurity experts noted that initial intrusions and vulnerability exploits do not necessarily equate to data theft or backend system compromise, which require detailed forensic analysis to confirm. However, the reliance on external vendors highlighted the recurring operational vulnerabilities tied to connected supply chains, prompting renewed calls for continuous automated system monitoring, rapid vulnerability patching, and stricter oversight of third-party network connections.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
