CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

Cybersecurity researchers have disclosed a two-pronged AI-augmented campaign targeting WordPress sites, e-commerce platforms, and Ukrainian critical infrastructure. The operation combines commodity offensive tools like Cobalt Strike with an AI orchestration layer powered by Anthropic’s Claude Code, and has led to the theft of more than 628,000 Ukrainian records.