// ClaudeHIGH
CyberXero, a financially motivated threat actor, used Claude Code to conduct targeted attacks against Ukrainian entities from October 2026, exfiltrating over 628,000 records. The campaign leveraged Claude Code for reconnaissance and attack automation. This represents a distinct malicious use of Claude tooling in a geographically targeted operation separate from concurrent financial sector campaigns.
// Get alerts for Claude