Claude Code Used to Steal 628,000 Ukrainian Records: How AI Is Supercharging Cyberattacks

Robert Moore · 2026-10-12

Imagine a burglar who can pick any lock, disable any alarm, and slip past any guard — all while you sleep. That's essentially what happened when a hacker group called CyberXero used an AI tool to break into thousands of systems across Ukraine. And the scary part? The tool they used is available to anyone. Cybersecurity researchers recently pulled back the curtain on a two-pronged campaign that targeted WordPress sites, e-commerce platforms, and even critical infrastructure in Ukraine. The attackers didn't just rely on brute force — they had an AI copilot. ### What Exactly Happened? The attackers used a combination of Cobalt Strike (a popular penetration testing tool turned weapon) and an AI orchestration layer powered by Anthropic's Claude Code. Think of it as a human hacker directing an AI assistant to find weaknesses, automate attacks, and exfiltrate data at scale. The result? Over 628,000 Ukrainian records were stolen. That's not a typo — six hundred twenty-eight thousand. And the campaign wasn't limited to one type of target. It hit: - WordPress websites (often poorly secured) - E-commerce platforms (think payment data) - Critical infrastructure entities (power grids, transportation, etc.) ### Why This Matters for Everyone You might be thinking, "I don't live in Ukraine, so why should I care?" Here's the thing: cyberattacks don't respect borders. The techniques used here can be replicated anywhere. And if AI can automate the boring parts of hacking, it lowers the barrier to entry for less skilled criminals. > "AI is not just a tool for defense; it's also a tool for offense. The same technology that helps you write code can help someone break into your systems." — Robert Moore, Lead Antidetect Browser Specialist This isn't about fearmongering. It's about awareness. The more you understand how these attacks work, the better you can protect yourself. ### How to Protect Yourself First, don't assume you're too small to be a target. Attackers often go after low-hanging fruit. Here are some practical steps: - Keep your software updated — especially WordPress plugins and themes. - Use strong, unique passwords and enable two-factor authentication everywhere. - Monitor your logs for unusual activity. AI-driven attacks can be stealthy, but they still leave traces. - Consider using an antidetect browser if you manage multiple accounts or need to separate your digital identities. It adds a layer of privacy that can make you a harder target. ### The Bigger Picture This incident is a wake-up call. AI is changing the game for both attackers and defenders. While we can't stop criminals from using these tools, we can make their jobs harder by staying informed and proactive. So the next time you hear about an AI-powered cyberattack, remember: it's not science fiction. It's happening now. And the best defense is a good offense — starting with your own security habits.