Case cairn-ai-platform-abused-100-orgsAI-assisted malwareWorldwide
Hackers abuse open-source AI platform Cairn to run agent-driven website intrusions; largest of three clusters breached 100+ organizations
NorForge found threat actors had left Cairn control panels exposed and identified three apparently malicious clusters focused on persistent access and financial theft. The largest, Chinese-language cluster ran 1,100+ attack projects across 14 dashboards. Reuters reports that this cluster breached over 100 companies. NorForge says attackers succeeded in roughly 10% of attempts, and Reuters could not establish how much data was extracted.
HighAttack using AIStatus: Under investigationVerified case file
Open in the interactive mapCite this case
- Reported
- Oct 19, 2026
- Location
- Worldwide
- Target
- E-commerce and payment platforms and other websites, mainly in the US, Japan and Australia (victims not named by NorForge)
- Severity
- High
- Verification
- Reported by credible press or researchers
- Triggered by
- Three unnamed clusters (largest Chinese-language; one English-language cluster NorForge believes is based in Africa)
- Actor type
- Criminal
- Sector
- Multiple / cross-sector
- Reported loss
- None reported
- CVE
- None
What happened
NorForge found threat actors had left Cairn control panels exposed and identified three apparently malicious clusters focused on persistent access and financial theft. The largest, Chinese-language cluster ran 1,100+ attack projects across 14 dashboards. Reuters reports that this cluster breached over 100 companies. NorForge says attackers succeeded in roughly 10% of attempts, and Reuters could not establish how much data was extracted.
Impact: Over 100 organizations hacked, with persistent access and financial theft reported.
Who triggered it
Actor: Three unnamed clusters (largest Chinese-language; one English-language cluster NorForge believes is based in Africa)
Attribution: SecurityWeek reports at least three threat actors; no names or nation-state links given in the summary.
Motive: Financial theft and persistent access
How it happened
Attack vector: Abuse of the Cairn AI platform for persistent access
Root cause: Unknown
Timeline
- Reported by SecurityWeek
Response
Unknown
Current status: Under investigation
Research warnings this case matches
- Seen in real incidents AI makes cyberattacks easier, faster and larger · CAIS
- Seen in real incidents Criminals and state hackers use AI in cyberattacks · International AI Safety Report
- Seen in real incidents Malicious actors and misuse · MIT AI Risk Repository
Compared with published AI risk research from several institutes on the Research vs reality page.
Sources (open in a new tab)
- SecurityWeek securityweek.com
- NorForge norforge.com
- Quartz qz.com
Cite this case
Hackers abuse open-source AI platform Cairn to run agent-driven website intrusions; largest of three clusters breached 100+ organizations. AI Threat Watch, case cairn-ai-platform-abused-100-orgs, Oct 19, 2026. https://aithreat.io/cases/cairn-ai-platform-abused-100-orgs/
Permanent link: https://aithreat.io/cases/cairn-ai-platform-abused-100-orgs/
Related cases
The same type of incident, most recent first.