Claude Code Used in Campaign Stealing 628,000 Ukrainian Records

CyberXero reports that attackers used Claude Code, PentAGI, Cobalt Strike, and 51 specialized agents in an active campaign involving 4,708 scanned targets, 429 compromised panels, 32 web shells deployed in 61 seconds, and more than 628,000 exfiltrated Ukrainian records. Leaked operational artifacts and refusal-bypass evidence are unusually concrete, though attribution, campaign status, and independently verified impact remain unsettled.