CERT24CyberXero Used Claude Code in a Campaign That Stole Over 628,000 Ukrainian RecordsLoading data…
CERT24Threat Observatory
Period

CyberXero Used Claude Code in a Campaign That Stole Over 628,000 Ukrainian Records

Cybersecurity researchers described two AI-augmented initial-access campaigns. CyberXero targeted WordPress and e-commerce platforms globally, as well as selected energy and critical-infrastructure organizations in Ukraine. Confirmed exfiltration from four Ukrainian organizations involved more than 628,000 records tied to Ukrainian individuals. The source states that the campaign remains ongoing.

← Back to intelligence

CyberXero Used Claude Code in a Campaign That Stole Over 628,000 Ukrainian Records

Cybersecurity researchers described two AI-augmented initial-access campaigns. CyberXero targeted WordPress and e-commerce platforms globally, as well as selected energy and critical-infrastructure organizations in Ukraine. Confirmed exfiltration from four Ukrainian organizations involved more than 628,000 records tied to Ukrainian individuals. The source states that the campaign remains ongoing.