Threat Actor
CyberXero
- First Reported
- Oct 12, 2026
- Latest Reported
- Oct 12, 2026
Reported Context (1)
- Russian-speaking, financially motivated initial access broker; assessed to have been active since at least July 2026. CyberXero Used Claude Code in Campaign That Stole 628,000+ Ukrainian Records
CVE (4)
Threat Actors (1)
MITRE ATT&CK (3)
Products (6)
Tools (3)
Industries (4)
Countries (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.