CyberXero uses AI agents to steal more than 628,000 Ukrainian records

The campaigns target WordPress sites, e-commerce platforms and critical infrastructure in Ukraine. The Hacker News reports that the operation combines Cobalt Strike with an orchestration layer powered by Anthropic's Claude Code, while Security Affairs says 51 AI agents supported the attacks and the stolen records included sensitive energy infrastructure data.

• According to Security Affairs, both campaigns used the same infrastructure.

Covered by 2 publishers within 2 hours of the first report.

• The Hacker News: CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

Reporting2

THN The Hacker News CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records · info@thehackernews.com (The Hacker News) 3:26 AM

SAF Security Affairs CyberXero Used 51 AI Agents to Steal 628,000 Ukrainian Records · Pierluigi Paganini 5:34 AM

Related

BC Attacker used ARTEX AI to breach South Korean financial firms October 8

ME Meta launches Muse Wonder and Muse Wonder Full for AI agents October 12

RTW Claude Opus 5.5 user says an AI agent deleted his C: drive October 7

IMP Google Launches Gemini Agent That Gives AI Coworkers Their Own Workspace Email October 9

Topics Anthropic