CYBERXERO USES CLAUDE CODE IN CAMPAIGN THAT STOLE OVER 628,000 UKRAINIAN RECORDS

Summary from the TLDR InfoSec newsletter

CyberXero used Claude Code, 51 agents, PentAGI, and Cobalt Strike in two campaigns. One automated WordPress and e-commerce exploitation; one manually targeted Ukrainian energy and utilities. A leaked working directory exposed session logs, plaintext tokens, toolkits, reconnaissance data, and stolen records. One run scanned 4,708 targets, reached 429 admin panels, and deployed 32 web shells in 61 seconds. Operators reset sessions and claimed authorized testing to bypass refusals.