AI agents stole 190k gaming credentials for under $400 in model costs

Check Point Research analyzed ARTEX, an open-source AI pentesting platform that criminals run as autonomous attack fleets, using data from 10 exposed operator databases. In one campaign, agents pulled about 190,000 gaming credentials, roughly 3.3% still valid, for an estimated $180–360 in model costs. A crypto-draining campaign moved no money, and some agent "successes" were hallucinated. Operators barely intervened, mostly used Chinese models, and exploited basic flaws like hardcoded passwords. The figures are Check Point's own and largely unsourced.