Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs

Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs

Operator’s AI bill averaged just $25 per completed scan

Three Open-Source AI Agents Ran 27+ Breaches for $25 a Target. 600,000+ Cards Followed.

Gambit Security recovered a staging server used to execute the first documented large-scale autonomous AI agent breach campaign. Active since July 2026, the operation compromised at least 27 organizations. The attacker, using the persona SOUL – Red Team Operator, loaded instructions onto an orchestration agent. The system processed 1,951 short Chinese prompts across 260 sessions to maintain the attack tempo. The architecture utilizes a three-age…