How One Hacker Turned AI Agents Into a $50-a-Breach Hacking Operation
How One Hacker Turned AI Agents Into a $50-a-Breach Hacking Operation
A cybersecurity researcher has documented what many observers describe as a striking escalation in AI-enabled cybercrime: a single hacker allegedly used commercially available AI agents to autonomously breach more than 100 company websites, at an average cost of about $50 per successful intrusion.
A New Low-Cost Playbook for AI-Driven Hacking
According to researcher Snorre Fagerland of Norforge, the campaign targeted roughly 1,200 websites and succeeded in breaching more than 100 of them. The entire operation reportedly cost around $5,000 in AI tokens, which works out to approximately $50 per successful breach when spread across the confirmed intrusions.
A recurring theme in coverage of this incident is how dramatically the cost and technical skill required for sophisticated, multi-stage cyberattacks appear to have dropped. Where this kind of campaign once required a team of skilled operators, researchers say it may now be achievable by a single person leveraging automated tools.
How the AI Agents Operated
The campaign reportedly combined DeepSeek and Anthropic's Claude Code models to automate reconnaissance, vulnerability exploitation, and in some instances social engineering tactics. Multiple reports indicate the agents ran with minimal human supervision, conducting the bulk of each intrusion autonomously.
Successful breaches are said to have taken an average of about 23 hours of automated probing. A notable point of discussion among security researchers is the dual-use nature of the tool involved: Cairn is an open-source, commercially available platform intended for penetration testing, which in this case appears to have been repurposed for unauthorized intrusions rather than its stated defensive use.
Named Companies and Unconfirmed Impact
Reports name Deere, SharkNinja, and Cummins as organizations implicated in the campaign. It's important to note that the full scope of any actual data compromise at these companies has not been independently confirmed and, in several cases, remains under investigation.
Corporate responses referenced in coverage have generally been measured, with statements describing situations as showing "no indication" of broader harm, "investigating," or "contained." A cautious reading of the available reporting suggests that while the intrusion attempts themselves appear credible and multiply sourced, claims about the extent of data theft or operational impact at specific named companies should be treated as unconfirmed pending further forensic detail.
Part of a Broader Global Pattern
This campaign is being discussed alongside a wider trend of AI-agent-driven breach activity. Similar incidents have reportedly surfaced in South Korea, Japan, and among Russia-linked threat groups, suggesting this is not an isolated case but possibly an emerging pattern in the threat landscape.
A separate incident, reported by security firm Gambit Security, involved AI agents implicated in breaches affecting between 7 and 25 organizations, with an associated theft of more than 600,000 credit card records. Several cybersecurity trade publications have covered aspects of the Cairn platform abuse, generally corroborating the core technical narrative, though independent verification of every detail across all reports is still limited.
What It Means for Cybersecurity Going Forward
Many in the security community view this episode as an early signal of how autonomous, low-cost AI tooling could lower the barrier to sophisticated attacks—a concern that may be particularly relevant for smaller or less-resourced organizations that lack dedicated security teams.
At the same time, a degree of caution is warranted. Full forensic verification of victim impact across the named companies is still pending in most public reporting, and some details—such as exact attribution of the hacker's identity and nationality—remain characterized by researchers as provisional rather than fully confirmed. Taken together, the core technical findings about AI agents conducting autonomous, multi-stage intrusions appear credible and have been reported across multiple outlets, even as specific claims about scale and consequence continue to be refined.