A Chinese hacker used AI agents to break into more than 100 company websites

A Chinese-speaking hacker has been observed using artificial intelligence (AI) agents to probe and then gain unauthorized access to more than 100 websites belonging to some extremely well-known companies. From Deere, the farming equipment manufacturer, to SharkNinja, the company behind beloved kitchen appliances, the agents were able to leverage exposed instances of Carin, an open-source AI-powered problem-solving platform that has proven popular among hackers, a Reuters report explains.

This is just the latest example of hackers turning to AI agents in an attempt to level up their attacks on unsuspecting companies and services. Snorre Fagerland, principal threat researcher at the cybersecurity company NorForge, spotted the hacker’s antics when observing Carin instances that had been inadvertently exposed.

Fagerland was able to watch multiple hackers go about their business, but the Chinese-speaking hacker was the most prolific, the report says. They targeted businesses based in the United States, Canada, Australia, and Japanese e-commerce sites. Notably, the hacker didn’t get into detail when commanding their legion of AI agents. Fewer than 100 Chinese characters were used, yet the agents had attempted ot break into more than 1,200 different websites as of the week ending October 18, 2026.

These agents weren’t simply throwing everything at a wall and hoping it stuck, either. Security researcher Fagerland was “impressed” by some of the tactics that had been used. In one case, the AI agents scoured digital records to find infrastructure associated with their target, located a public-facing control panel, identified a weakness, and then leveraged it to force the execution of malicious commands, the Reuters report detailed. “It’s ⁠not straightforward to come up with solutions like that,” Fagerland told Reuters. “It’s not script kiddie stuff.”

Vitally, the approach of using AI agents in this way means that they can be given instructions and then left to their own devices. With no supervision required, those commanding the agents are free to turn their attention elsewhere. While SharkNinja told Reuters that the attack only impacted a site used for product support information, the rest of the AI-aided hackers had more luck. One of the hackers monitored by Gargerland stole credit card data, while another tried to steal from a cryptocurrency exchange — although it isn’t clear whether they were successful.

Follow Tom’s Hardware on Google News, or add us as a preferred source, to get our latest news, analysis, & reviews in your feeds.