Criminal Networks Deploy AI Bots to Steal Bank Credentials

CyberCartel, a criminal organization targeting businesses in Latin America for over a decade, has begun using artificial intelligence agents to automate attacks against banks and mobile payment applications. The group, active since at least 2012, has shifted its operations to automate the theft of passwords and customer data.

According to research from the cybersecurity startup Straiker, which shared the findings with The Information, recent months have seen AI substantially increase CyberCartel's reach. The group can now target a higher number of organizations at a pace human hackers cannot match, allowing for direct access to bank accounts with minimal human involvement.

Among the tools CyberCartel used are agents from SpaceX, called Grok, and from Anthropic, called Claude. An agent from the Chinese lab Moonshot AI has also been part of the operation. Straiker passed its findings to both SpaceX and Anthropic, and the two companies are working to cut the group off from their services. Anthropic has already blocked its access to Claude. Straiker is still trying to reach Moonshot AI.

The episode shows how fragile the safeguards built into AI models can be. Such systems are normally designed to refuse requests that would help carry out cyberattacks, but CyberCartel reportedly got around them by telling the models they were operating in test environments. When one model declined to continue, the hackers switched to another. If that model refused as well, the AI agents were instead assigned to deploy malware.

Straiker's research does not suggest that the group has used Anthropic's Mythos model. Anthropic drew attention earlier this year when it unveiled Mythos and warned that hackers could exploit it, and similar models, for exactly this kind of attack. Its release also prompted security teams around the world to rush to fix thousands of vulnerabilities the model had identified.

The incident is not the first time Anthropic has learned that bad actors are using its technology. In November 2025 the company disclosed details of its AI being used in a cyberattack. Claude was later used to break the security of OpenAI, a rival AI developer, although that operation was carried out by researchers rather than criminals.

The Straiker report arrives just days after word emerged that South Korean authorities are investigating a comparable problem affecting banks in that country. Hana Bank, KB Kookmin Bank and Shinhan Bank are among those affected, and the personal credit information of at least 25,000 Shinhan Bank customers has been leaked.

Companies in the industry are aware of the risks. Nvidia, now focused on hardware for AI data centers, recently launched the Open Agent Safety Platform, a software platform and reference system design that uses a new hardware and software security stack to contain rogue AI agents. It is intended to help stop agents from escaping their sandboxes, executing unauthorized code, gaining unauthorized access to critical infrastructure or bypassing guardrails.