AI‑Powered Bot Swarm Infiltrates Over 100 Corporate Websites, Hits John Deere and SharkNinja

According to a technical analysis published by cybersecurity firm Norforge, an unknown attacker is said to have breached upwards of a hundred websites using a self‑directing swarm of artificial‑intelligence agents.

The Norforge briefing characterises the campaign as a collection of AI‑driven scripts capable of identifying weak entry points, exploiting them, and then spreading further with little human supervision. According to the firm, these agents can modify their approach on the fly, enabling the operation to expand across a wide array of online assets.

The confirmed list of targets includes agricultural equipment producer John Deere and consumer‑goods company SharkNinja, each of which experienced unauthorised entry into internal web portals. Although the exact contents of the compromised data remain undisclosed, the breaches highlight that even well‑funded organisations are vulnerable to automated, AI‑based intrusion tactics.

This development comes as cybersecurity specialists caution that generative AI utilities are reducing the difficulty of launching sophisticated attacks. By automating tasks such as reconnaissance, credential stuffing and exploitation, AI agents can sustain long‑running campaigns without continuous human input, complicating detection and attribution.

Norforge advises firms to bolster multi‑factor authentication, implement ongoing vulnerability scans, and adopt behavioural analytics that can flag irregular AI‑generated traffic. Law‑enforcement bodies have been alerted, and additional inquiries aim to uncover the attacker’s motives and the complete scope of the breach.