A Chinese-speaking hacker used AI agents to break into 100+ company websites. The agents ran on a worker named claudecode_deepseek-v4.1-flash. Victims included Deere, SharkNinja and Cummins. The campaign targeted online shops in the US, Canada, Japan and Australia. Agents aimed to plant web shells for lasting access to payment systems. NorForge found 1,100 attack projects across 14 linked panels. The estimated cost was about $50 per successful hack. Open Cairn control panels exposed hundreds of credentials and API keys. Cairn’s author said the platform was not designed for hacking. NorForge is working to warn victims and take panels down.
What it unlocks
Automated hacking of websites at scale using AI agents with minimal human oversight.
- 100+ sites breached
- $50 per hack
- 1,100 attack projects
- 10% success rate
Sources