🔍 Read the full analysis: A Hacker, A Swarm Of AI Agents, And The $50 Break-In on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
A Chinese-speaking operator used Cairn, a free, open-source AI agent platform, in a campaign that tried more than 1,200 websites and was linked by Reuters to break-ins at more than 100 companies. NorForge estimated the campaign cost about $5,000 in AI usage, or roughly $50 per successful intrusion, but said that estimate carries considerable uncertainty. The amount of data accessed has not been established.
A Chinese-speaking operator used a swarm of AI agents to probe online shops from late September, with records reviewed by Reuters linking the campaign to break-ins at more than 100 company websites, including sites associated with Deere, SharkNinja and Cummins. The agents ran through Cairn, a free, open-source platform; the amount of data, if any, taken from the affected sites has not been established.
NorForge security researcher Snorre Fagerland found internet-accessible Cairn control panels, some without passwords, and monitored activity through them. NorForge identified more than 20 panels it linked to likely malicious use. The largest activity cluster, which the firm labels AIA0001, used Chinese-language task instructions. NorForge counted more than 1,100 attack projects across 14 panels in that cluster, while Reuters reported that the operator’s records showed attempts against more than 1,200 sites by mid-October.
NorForge’s report, published October 19, does not name victims. Reuters says it independently reviewed activity recorded in Cairn and contacted companies. Deere told Reuters it took “necessary remediation actions” and had “no indication that sensitive information was accessed.” SharkNinja said a standalone product-support site was affected and the threat was contained. Cummins said it was investigating “a potential cyber-attack” on a website operated by a third-party vendor. Reuters could not determine how much data, if any, was accessed.
NorForge measured successful AIA0001 projects as taking a little under 23 hours from start to goal. It estimated AI expenses for the campaign at about $5,000, or roughly $50 per successful intrusion, while warning that the estimate involved “considerable” uncertainty. Those figures describe NorForge’s estimate, not a verified accounting of the operator’s total costs.
One operator, a swarm of agents
The campaign in numbers
What the researcher and Reuters report about the busiest group NorForge found. Counts come from the attackers’ own exposed panels; cost and success figures are estimates.
The price tag estimates
NorForge / Fagerland, “uncertainty considerable”
- ~$5 per task on average, including tasks that fail early
- $100+ for long projects with more than 1,000 intents and facts
- ~$5,000 in AI costs for the campaign, about $50 per successful hack
- ~10% success rate, NorForge’s “reasonable assumption”
How the swarm runs
Simplified, no attack details
- Shop websites are ranked by traffic and checked automatically in a browser
- Each target becomes a Cairn project: a starting point and a goal
- Agents post facts and next steps on a shared board and build on each other
- Goal: a hidden way back in to shop and payment systems, for later
- 22 SepGambit reportGambitCairn found among three AI harnesses on a criminal’s staging server (separate campaign)
- 25 SepCampaign startsReutersA Chinese-speaking operator turns agents on shops in the US, Canada, Australia and Japan
- ≈ 2 OctOpen panels foundReutersFagerland starts finding Cairn panels in malicious use, about two dozen
- mid-Oct1,200+ sites triedReutersBreaks into websites of 100+ companies, incl. Deere, SharkNinja, Cummins
- 19 OctReport and investigationNorForge · ReutersNorForge publishes “Inside Cairn”; Reuters publishes its investigation
Sources: NorForge, Inside Cairn (19 Oct 2026); Reuters (19 Oct 2026); Gambit Security (22 Sep 2026). Numbers as published, same rounding as the article.
Powered by Thorsten Meyer AI
Lower-Cost, Longer-Running Intrusions
The campaign illustrates how an operator can delegate repetitive reconnaissance and probing to software agents, potentially spending less time directing each individual attempt. The reported $50-per-intrusion estimate is uncertain, but points to a possible reduction in the effort required to test many targets. The reported campaign also shows that exposure may extend beyond a company’s main website to support pages and third-party vendor sites.
For defenders, the scale creates a practical challenge: automated activity can generate many findings and alerts, while the initial access point may sit on a site managed separately from core systems. NorForge’s account also raises questions about how organizations identify automated activity and limit the exposure of web-based control panels. The reporting does not establish that Cairn itself caused the intrusions without human direction, nor that every targeted site was compromised.
Products Worth Considering
Bose QuietComfort Wireless Bluetooth Headphones with Active Noise Cancellation, Mic, USB‑C Charging, Deep Bass, 24‑Hour Battery – White Smok
LG 34GX90SA-W 34-inch Ultragear WQHD OLED Curved Gaming Monitor
Samsung Galaxy Tab S10 FE 128GB Wi-Fi Android Tablet, Blue
As an affiliate, we earn on qualifying purchases.
How Cairn Panels Exposed Activity
The reporting followed a separate September investigation by Gambit Security. The firm said it recovered a criminal staging server containing three AI “harnesses”—programs that let AI models carry out tasks—including Cairn. NorForge then searched for Cairn dashboards visible on the internet. The firm said most dashboards require authorization, but it found some panels that did not have password protection and began identifying suspicious activity around October 2.
Cairn is a general-purpose agent platform, not a tool designed specifically for cyberattacks. NorForge describes it as a system that tracks a task’s state as agents record findings and next steps. Reuters also reported a separate campaign described by Gambit Security in September: at least 27 companies were compromised, and at least 600,000 card records were taken from two of them. That was a distinct campaign, not evidence that the same operator or activity was responsible for both incidents.
“The company said a standalone product-support site was hit and the threat was contained.”
— SharkNinja, in a statement to Reuters
Victim Impact Remains Unverified
The operator’s identity has not been established publicly. Reporting describes the person as a Chinese-speaking actor; it does not identify an individual, confirm where the operator was located, or report an arrest or charge. Reuters could not determine how much data, if any, was taken from the affected websites. Deere said it had no indication sensitive information was accessed, while the available statements from SharkNinja and Cummins do not settle the full scope of impact.
NorForge’s cost figure is an estimate, and the firm itself described the uncertainty as considerable. The precise number of successful intrusions is also tied to the records and methodology reviewed by the researchers and Reuters. The findings do not show that all 1,200-plus targeted sites were breached, or that every identified Cairn panel was used for malicious activity.
Company Investigations Continue
Companies affected by the campaign may continue investigating their websites and vendor-managed services, while NorForge’s published findings provide security teams with information about the exposed Cairn panels it observed. Cummins said it was investigating a potential attack; the public statements cited by Reuters do not provide a final account of that inquiry. Further information about data access, affected systems and remediation may emerge as company reviews progress.
For now, the available reporting supports a narrower conclusion: an operator used AI agents to automate a broad campaign, and Reuters linked the activity to break-ins at more than 100 company websites. The operator’s identity, the full number of compromised organizations and the consequences for data remain unresolved.
Key Questions
Who was behind the campaign?
The operator has not been publicly identified. NorForge and Reuters describe a Chinese-speaking actor, but the available reporting does not establish the person’s name or location.
What is Cairn?
Cairn is a free, open-source platform for coordinating AI agents. Its author says it was not designed for hacking, though NorForge and Reuters reported its use in the campaign.
Were sensitive data or payment details stolen?
That has not been established across the affected sites. Reuters could not determine how much data, if any, was accessed. Deere reported no indication that sensitive information was accessed; the overall impact remains unclear.
Does the $50 figure represent a confirmed cost?
No. NorForge estimated roughly $5,000 in AI expenses for the campaign, or about $50 per successful intrusion, and said the estimate involved considerable uncertainty.
Source: ThorstenMeyerAI.com
