CyberXero Ransomware Group Uses AI Code in Attacks on Ukrainian Targets

A Russian-speaking threat actor, CyberXero, has conducted an AI-augmented initial access campaign, utilizing Anthropic's Claude Code. This financially motivated ransomware operation targeted WordPress sites, e-commerce platforms, and critical infrastructure in Ukraine. The attacks resulted in the confirmed exfiltration of over 628,000 records belonging to Ukrainian individuals, highlighting the evolving methods of cybercriminals and the misuse of AI tools.