A Chinese-speaking hacker has been observed using artificial intelligence (AI) agents to probe and then gain unauthorized access to more than 100 websites belonging to some extremely well-known companies. From Deere, the farming equipment manufacturer, to SharkNinja, the company behind beloved kitchen appliances, the agents were able to leverage exposed instances of Carin, an open-source AI-powered problem-solving platform that has proven popular among hackers, a Reuters report explains.

This is just the latest example of hackers turning to AI agents in an attempt to level up their attacks on unsuspecting companies and services. Snorre Fagerland, principal threat researcher at the cybersecurity company NorForge, spotted the hacker's antics when observing Carin instances that had been inadvertently exposed.

Fagerland was able to watch multiple hackers go about their business, but the Chinese-speaking hacker was the most prolific, the report says. They targeted businesses based in the United States, Canada, Australia, and Japanese e-commerce sites. Notably, the hacker didn't get into detail when commanding their legion of AI agents. Fewer than 100 Chinese characters were used, yet the agents had attempted ot break into more than 1,200 different websites as of the week ending October 18, 2026.

These agents weren't simply throwing everything at a wall and hoping it stuck, either. Security researcher Fagerland was "impressed" by some of the tactics that had been used. In one case, the AI agents scoured digital records to find infrastructure associated with their target, located a public-facing control panel, identified a weakness, and then leveraged it to force the execution of malicious commands, the Reuters report detailed.

Source link