A hacker who used Chinese commands to manipulate artificial intelligence (AI) successfully breached over 100 out of more than 1,200 global websites. It is reported that the cost of using AI for this attack was estimated to be around $5,000. The targeted websites span across countries such as the United States, Canada, Japan, and Australia, including several well-known enterprises.
According to a report by Cyber Security News on October 20th, the attack began on September 25th and primarily targeted online retailers and e-commerce platforms. The hacker utilized an open-source tool named Cairn to direct multiple AI programs to automatically search for vulnerabilities in websites, circumvent security measures, and gain entry into enterprise servers.
Researchers from the internet security company NorForge, led by Snorre Fagerland, found that the hacker only needed to instruct the AI on which website to attack and what task to complete. The AI would then autonomously search for vulnerabilities and attempt different intrusion methods. If one method failed, it would automatically switch to another, eliminating the need for the hacker to personally operate throughout the process.
Investigations revealed that this wave of attacks involved 14 control panels, leaving behind more than 1,100 attack logs. Some servers of the targeted websites were implanted with malicious programs, allowing the hacker potential re-entry in the future.
NorForge estimates that the success rate of these attacks was approximately 10%, with an average cost of around $50 per successful intrusion, totaling approximately $5,000. However, these figures are research-based estimates on the usage of AI and not the actual costs paid by the hacker.
The attacked enterprises include the US agricultural machinery manufacturer Deere, home appliance company SharkNinja, and engine manufacturer Cummins.
Deere stated that remedial measures have been taken, and no signs of sensitive information access have been detected. SharkNinja mentioned that the attack targeted an independent product support website, and the issue has been controlled. Cummins, on the other hand, stated that they are investigating the potential intrusion of websites operated by third-party suppliers.
Overall, this cyber attack underscores the growing sophistication and capabilities of hackers leveraging AI technology to breach online security measures and infiltrate enterprise systems, highlighting the need for robust cybersecurity measures and constant vigilance in today’s digital landscape.