Skip to content
NorForge·

🚨Over 20 AI-Powered Hacking Panels Exposed in Malicious Operations

AI-driven hacking panels are being used to target e-commerce

TL;DR

NorForge's investigation reveals over 20 exposed AI-driven hacking panels likely used in malicious cyber operations, targeting e-commerce/payment systems for financial gain. The use of Playwright and Docker highlights the sophistication of these attacks.

NorForge has uncovered over 20 publicly exposed AI-powered hacking panels, including Cairn, being extensively used in malicious cyber operations. These panels are state-based problem-solving engines designed for penetration testing but are now being weaponized to target e-commerce/payment infrastructure. The investigation highlights the use of advanced tools like Playwright and Docker, indicating the sophistication of these automated attacks. The exposure of these panels provides an unusually detailed view of how threat actors select targets, direct autonomous agents, and exploit vulnerabilities, with over 1100 attack projects identified across 14 dashboards.

Over 20 AI-Powered Hacking Panels Exposed in Malicious Operations — NorForge

Key Points

1

Over 20 exposed Cairn panels identified as likely malicious, with financial motivation behind the attacks.

2

1100 attack projects spread across 14 dashboards linked to the malicious operation.

3

Cairn is a state-based problem-solving engine used for penetration testing, now weaponized for cyberattacks.

4

The actor uses Playwright and Docker in their automated validation and testing pipeline.

5

Tools found on the agent worker folder include Playwright, Chromium, PHPGGC, StyleSmuggler, and Docker.

Why It Matters

If you're running e-commerce or payment systems, this is a red flag. The exposure of AI-powered hacking panels reveals the use of sophisticated tools like Playwright and Docker, indicating a new level of automation in cyberattacks. This affects not just security teams but also developers and IT staff responsible for securing web applications and infrastructure.

AIcybersecuritye-commercemalwarepenetration-testing

Comments

Subscribe to join the conversation...

Be the first to comment

Enjoyed this article?

Get it daily. 7am. Free. Reads in 5 minutes.

Join 3,566 builders reading daily.

Also get