The trick: Scope Swap
An army of AI agents did plant shells on real websites.
But the companies were named by Reuters, the hits were websites, and the $5,000 is a guess.
One hacker's AI agents breached John Deere, SharkNinja and 100+ companies for about $5,000.
Before you read on. Your call?
TRUE, BUT
5,000
NorForge found exposed Cairn panels planting uploader shells on websites. Reuters named the firms; Deere saw no sign of sensitive data accessed and SharkNinja says a standalone support site was hit. The $5,000 is an estimate; the report says it has no token numbers.
There’s more to this story.
Membership opens the full investigation, the strongest counterargument and what to do with what you’ve learned.
30 days free, then A$89 a year. Payment card required. Cancel before the trial ends to avoid the first charge.
Review my 30-day free trial →- At sign-up: 30 days free. Payment card required. One introductory trial per customer.
- Your trial ends 30 days after you start. Unless you cancel before then in Account → Manage subscription, we charge A$89 for the first year. It renews automatically at A$89/yr until cancelled.
- You can ask for a full refund within 14 days after any annual payment, renewals included, with no reason needed, by emailing hello@bskiller.com. This voluntary refund does not limit your rights under the Australian Consumer Law.
By starting your trial, you agree to the Terms.
BS Killer is published by Inferno Tech Pty Ltd, ABN 27 647 413 474.
Get tomorrow’s check free by email.
Couldn't check your access. That's on us.
The trick has a name
We call it Scope Swap: applies to far less than it sounds like. You'll see it again. Learn to spot it →
Receipts
- Supports it.slashdot.org:
A Hacker Broke Into John Deere, SharkNinja With an Army of AI Agents
- Supports it.slashdot.org:
A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own
- Context it.slashdot.org:
Though Norforge doesn't name the targets, Reuters reports that the victims included companies like John Deere, SharkNinja, and Cummins.
- Context norforge.com:
An investigation by NorForge into publicly exposed AI-driven penetration-testing control panels
- Context norforge.com:
with over 1100 attack projects spread over the 14 dashboards likely associated with this group
- Refutes norforge.com:
We dont have actual numbers on token usage, but with the underlying data it's possible to guesstimate.
- Context norforge.com:
We estimate the average cost of a task to end up around $5 if one includes unsuccessful, early ending projects.
- Refutes norforge.com:
The uncertainty here is however considerable, and numbers could be off by a clear margin.
- Context norforge.com:
Payload: Uploader shell (HTML upload form + move_uploaded_file to save files), explicitly not a command-executing webshell.
- Supports norforge.com:
The URL did indeed serve an uploader webshell.
- Context norforge.com:
average success rate is hovering around 10%
- Supports thenextweb.com:
Fagerland estimated to Reuters that the campaign had used about $5,000 worth of tokens, or roughly $50 per successful hack.
- Context thenextweb.com:
or roughly $50 per successful hack. That is a rough estimate.
- Context thenextweb.com:
TNW has not independently verified the intrusions.
- Refutes thenextweb.com:
Reuters could not establish how much data, if any, the hackers took.
- Context thenextweb.com:
Cairn is an AI problem-solving platform.
- Refutes it.slashdot.org:
A John Deere spokesperson said there is "no indication that sensitive information was accessed"
- Refutes it.slashdot.org:
SharkNinja says the breach impacted a standalone site with product support information, and that it has contained the threat.
- Refutes it.slashdot.org:
while Cummins said it's "investigating the report of a potential cyber-attack on a website operated by one of our third-party vendors
- Context tomshardware.com:
Snorre Fagerland, principal threat researcher at the cybersecurity company NorForge
Open the Receipts Pack → What each source proves, every figure traced, and what would change our verdict.
