AI-Powered Campaign Targets Hundreds of Online Retailers

The report states that the campaign has hit at least tens of companies since July 2026. The tools named in the article are the open-source AI agent Hermes and the penetration testing tool Strix, which the report says were used together in the attack campaign.

According to the report, the attackers gained some access to a Fortune 500 hospitality company and to three US firms, one of which was an airline. Between August 23 and 31, the report says, they ran Strix 146 times in 'deep mode' against 138 hosts. That window spans nine days, while the campaign as a whole is described as running since July 2026.

The report frames the activity as financially motivated, with the open-source agent Hermes and the penetration testing tool Strix named as the tooling involved. The headline refers to hundreds of online retailers, while the body of the report describes at least tens of companies affected since July 2026. The specific dates given in the article are August 23 to 31, when the attackers ran Strix 146 times in 'deep mode' against 138 hosts using the tooling described.