A financially motivated threat actor is using three open source AI harnesses to autonomously attack hundreds of online retailers at minimal cost per target. Since July 2026, the campaign has compromised at least 27 companies, stealing over 600,000 credit card records and installing skimmer scripts, with attacks often succeeding in hours and sometimes destroying victim data through the AI's cleanup routines.