As cited
Copy frozen at (site build).
threat intel
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Researchers disclosed a campaign dubbed CyberXero that combined Anthropic's Claude Code with commodity tools like Cobalt Strike to target WordPress sites, e-commerce platforms, and critical infrastructure in Ukraine, resulting in the theft of over 628,000 records. The operation blended artificial intelligence (AI) orchestration with traditional offensive techniques to conduct initial access attacks.
Why it matters: Organizations in Ukraine operating WordPress, e-commerce, and critical infrastructure are exposed; practitioners should review access logs and implement detection for Cobalt Strike indicators and unusual AI-driven reconnaissance patterns.
- Source published
- First seen by Cybersecurity Tracker