A financially motivated actor used an autonomous multi-agent framework to compromise thousands of third-party credentials in under six hours.