Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
(www.bleepingcomputer.com)
But someone hosts the compute. Someone buys the service. Someone trains the model and decides what system prompt to use. They're the humans responsible.