One Operator, 1,951 Prompts, 600,000 Card Records: What AI Agents Do to Payment Fraud Economics

A cybercrime campaign investigated by Gambit Security launched 105 attack projects in five days, compromised at least 27 companies and stole more than 600,000 unexpired card records from two victims. Estimated cost to the attackers: $12,000 to $18,000 . The campaign ran between 10 and 15 September, and ITWeb Africa asked three cybersecurity and AI specialists what it implies for African payment systems.