Over 628,000 Ukrainian files exfiltrated in Claude Code hacking spree
Security researchers uncover an AI-driven campaign that combines Claude Code with automated tools to steal Ukrainian records and target WordPress and critical infrastructure.
A two-pronged AI-augmented campaign targets WordPress sites and Ukrainian critical infrastructure, starting around July 2026.
The operation uses Claude Code with 51 AI agents to scan, exploit, and exfiltrate data, plus a manual track aimed at energy and utilities.
Over 628,000 Ukrainian records were exfiltrated, with additional compromises in Poland, China, and the Netherlands.
Security teams warn about exposed Redis servers and compromised WordPress admin accounts as common weak points.
Quick read · 1 min
Security researchers describe a two-track AI-assisted attack campaign that began by targeting WordPress sites and e-commerce platforms, and separately aimed at Ukrainian energy and utilities. The operation uses Claude Code with a network of AI agents to scan, exploit, and exfiltrate data, while a manual path probes critical infrastructure for deeper access. At least 628,000 Ukrainian records were exposed, with some activity noted in Poland, China, and the Netherlands. Key weaknesses include exposed WordPress admin areas and Redis servers.
What this means for you is simple: if you run a WordPress site or manage a storefront, patch promptly and monitor admin activity. Individuals should watch for signs of data misuse and safeguard payment details. Expect more advisories and improved defenses around these common attack surfaces in the coming weeks.
Patch WordPress plugins and themes
Limit admin accounts and require MFA
Monitor login attempts and data exfiltration signals
Security researchers have uncovered an AI-augmented cyber campaign that blends automated exploitation with an AI orchestration layer to steal data and access. The operation has two parallel tracks: a broad, automated push against WordPress and e-commerce platforms, and a targeted, manual effort aimed at Ukrainian energy and critical infrastructure. The effort appears to have been active since at least July 2026.
In the broad campaign, attackers focused on known flaws in popular web software to seize control of WordPress sites and related e-commerce backends. The campaign’s automation scanned thousands of targets quickly, with researchers counting hundreds of compromised WordPress administrations and dozens of web shells deployed in minutes. The goal is to grab access data, payment details, and other sensitive information that can be sold or misused.
For the more targeted track, the attackers turned to Ukrainian energy providers and utilities. The aim here is reconnaissance and exploitation, not broad data theft, and the actors appear to be pursuing a longer game that could enable future intrusions or disruptions in critical services.
The AI component sits on the attacker’s side as Claude Code, employed with a cluster of AI agents to handle scanning, chaining exploits, reconnaissance, and post-exploitation tasks. An additional open-source tool, PentAGI, is used as an autonomous agent that connects to Cobalt Strike for payload generation and testing. In short, the attackers recruited a mix of off-the-shelf malware and AI to automate and scale a complex intrusion operation.
Exfiltrated data and campaign artifacts were discovered in an exposed directory tied to the attackers’ infrastructure, illustrating the kind of logs, tokens, and scripts involved in the operation. The separate, manual track is described as aimed at Ukrainian critical infrastructure with potential for deeper, long-term effects.
Experts warn that two kinds of weaknesses are at play: exposed web administration panels on WordPress and e-commerce platforms, and exposed Redis servers. Both present viable paths for attackers to gain initial access, move laterally, and harvest data if left unmonitored.
01
What this means for everyday users
For ordinary readers, the takeaway is simple: keep your sites and servers patched, watch for unusual admin activity, and don’t leave critical services exposed to the internet without proper protections. If you manage WordPress or e-commerce sites, enforce strong credentials, disable unused admin accounts, and review access logs for unfamiliar IPs or sessions. For individuals, this underscores the importance of monitoring payment cards and personal data for signs of misuse, especially if you’ve ever had a data breach or used services with WordPress-based storefronts.
02
Which targets were affected
The campaign targeted a mix of consumer-facing platforms (WordPress and e-commerce) and Ukrainian critical infrastructure. In the automated stream, thousands of targets were scanned, with hundreds of WordPress panels compromised. In the more focused track, the focus was on an energy provider in Kharkiv and other utilities in Ukraine.
03
How the AI component works
Claude Code is used to run a pool of agents that can perform scanning, exploitation, and data collection tasks. The operation also used PentAGI to connect to a pentest framework for automated payloads. The combination lets attackers push many targets at once while still performing targeted intrusion work when a higher payoff is found.
04
What happens next
Security teams will likely tighten monitoring around WordPress plugins, Redis databases, and admin accounts. If your organization relies on WordPress or similar platforms, review recent vulnerability advisories and ensure you are not exposed to known flaws. For individuals, keep an eye on unusual account activity and consider enabling multi-factor authentication where available.
