🔴 Critical: CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
-
Cybersecurity researchers have disclosed details of a two-pronged, AI-augmented initial access campaign attributed to a threat actor tracked as CyberXero. The operation targeted WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine, and resulted in the theft of more than 628,000 Ukrainian records.
What sets this campaign apart is its use of an AI orchestration layer built on Anthropic's Claude Code, combined with commodity offensive tooling such as Cobalt Strike. Rather than relying solely on conventional tradecraft, the attackers appear to have used the AI component to coordinate and scale their initial access efforts across multiple victim types.
Key points from the disclosure:
- The campaign is described as two-pronged, meaning it pursued more than one infection or intrusion path.
- Targeted sectors include WordPress installations, e-commerce platforms, and critical infrastructure organizations in Ukraine.
- The toolset blends widely available offensive tools (Cobalt Strike) with an AI orchestration layer powered by Claude Code.
- More than 628,000 Ukrainian records were stolen over the course of the activity.
The researchers have attributed the campaign to CyberXero. As with any initial access operation of this kind, organizations in the affected sectors should review their exposure, particularly internet-facing WordPress and e-commerce systems, and monitor for signs of Cobalt Strike activity in their environments.
Source: The Hacker News
Has your organization reviewed its WordPress and e-commerce attack surface in light of this campaign?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login