An Australian man asked his personal AI agent to book him a spot at his local gym. Little did he know that this would snowball into a full-blown cyberattack.
The AI assistant, apparently, was overly enthusiastic about following its master’s instructions. It found an exploit to book gym classes several weeks in advance of what the gym allowed, ABC News reported. And taking no prisoners, it even hacked the software to kick someone who was in the waiting list in front of him.
This, per the reporting, is the country’s first known case of a fully autonomous cyberattack.
The man, Andrew, works for a company that sells AI products to businesses. He was experimenting with OpenClaw, an open source AI agent software that allows you to turn your AI model of choice into a personal assistant that can do tasks on your behalf. The AI powering Andrew’s OpenClaw agent was Anthropic’s Claude.

