CyberXero hijacks Claude Code agents to hit 429 WordPress sites in 61 seconds
A campaign linked to the CyberXero group used 51 compromised Claude Code agents to break into 429 WordPress admin panels and plant 32 web shells in about a minute, security researchers report. The operation, which also stole more than 628,000 records from four Ukrainian organizations, shows how hijacked AI coding tools can become part of the attack surface.
A threat group tied to a sweeping web compromise campaign has been linked to the abuse of dozens of Claude Code agents to breach hundreds of WordPress sites in under a minute, in a case that points to how AI-based developer tools themselves are becoming part of the cyber battlefield.
Security firm SOCRadar attributes the operation to a group it tracks as CyberXero. According to the firm’s analysis, the attackers leveraged 51 Claude Code agents – automated coding assistants – during a rapid-fire sequence that accessed 429 WordPress administration panels and deployed 32 web shells in just 61 seconds. Web shells are small bits of malicious code that give attackers persistent remote access to a server, allowing them to run commands, exfiltrate data or pivot deeper into networks.
The same campaign is said to have stolen over 628,000 records from four Ukrainian organizations. The nature of those records has not been fully detailed, but volumes at that scale typically include customer data, internal documents or operational information that can be monetized or used for follow-on attacks. The targeting of Ukrainian entities also raises questions about whether the operation has geopolitical dimensions, although SOCRadar has not publicly linked CyberXero to any state sponsor.
What makes this case stand out is not only the number of compromised websites but the way attackers reportedly exploited AI-powered coding infrastructure as part of their tooling. Claude Code and similar agents are designed to help developers write and debug code more efficiently. In this scenario, compromised or misused instances of those agents became force multipliers for an attacker able to direct them at scale.
For website operators and small businesses that rely on WordPress, the practical risk is that a site they consider low-profile can be swept up in a mass exploitation wave and turned into an asset for someone else’s campaign. A single web shell on a vulnerable WordPress installation can be used to host phishing pages, distribute malware, or quietly redirect visitors, often without the owner’s immediate knowledge.
Strategically, the CyberXero operation illustrates a broader shift in cyber operations: adversaries are not just targeting end-user applications and servers but also the emerging layer of AI-driven development tools and automation. Access to these systems – whether through stolen API keys, compromised credentials or lax configuration – lets attackers coordinate large numbers of actions in compressed time windows that strain traditional detection and response mechanisms.
For defenders, the message is uncomfortable but clear. AI agents embedded in development pipelines need to be treated as high-value assets with strong authentication, logging and access controls, not as benign helpers sitting on the edge of the attack surface. Audit trails that show what automated tools did, and when, become critical for reconstructing the sequence of an intrusion when an incident like CyberXero’s mass WordPress breach surfaces.
Over the coming weeks, security teams will be watching to see whether more victims of this particular campaign come forward, whether code or infrastructure unique to CyberXero shows up in other regions, and whether AI tool providers begin issuing specific guidance or patches aimed at hardening their systems against hijacking. A move by major cloud and AI platforms to roll out default safeguards – such as rate limiting, anomaly detection on mass admin access, or stricter key management – would be an early sign that this incident is shaping how the industry thinks about AI in the threat model.
Sources
- OSINT