CyberXero: An Access Broker Running 51 AI Agents Puts Poland Second on Its Target List, With 284 Government Domains Scanned

Researchers at SOCRadar have published an analysis of CyberXero, a Russian-speaking initial access broker. An access broker breaks into systems and then sells that access to other criminals, such as ransomware gangs. What sets CyberXero apart is that a single person does the work of a whole team, using as many as 51 artificial intelligence agents. Poland ranks second among the group’s targets, behind only Ukraine: 284 Polish government domains have been scanned.

One operator, the reach of a full team

According to SOCRadar, CyberXero uses AI at two levels:

• up to 51 specialized Claude Code agents on the operator’s workstation. They handle reconnaissance, vulnerability exploitation, and post-compromise activity,
• the PentAGI framework, connected to a Cobalt Strike server, which generates malicious payloads.

Session logs show how the operator got around the models’ safeguards: illegal instructions were presented as a penetration test of “their own infrastructure.”

Figures from CERT Orange Polska show what this automation achieves. In a single run, the tools scanned 4,708 targets, identified 429 WordPress admin panels, and uploaded 32 web shells (hidden backdoors on the server), all in 61 seconds.

Two parallel tracks

CyberXero runs two campaigns side by side:

1. Mass and automated, worldwide: breaking into WordPress sites and online stores, stealing payment card data, and selling access.
2. Selective and manual: carefully prepared reconnaissance of 7 Ukrainian energy sector organizations and other critical infrastructure. Data on more than 628,000 people leaked from four Ukrainian organizations.

Traces of the group’s activity have been found at more than 40 organizations worldwide, including in China and Pakistan.

Why Poland is on the list

Scanning 284 government domains is a typical first step: looking for websites with outdated software and weak passwords. Taken together with the operations against Ukrainian critical infrastructure and earlier attacks on Polish water utilities and the energy sector, this needs to be taken seriously, including by private companies. The same automated tooling that scans government agencies can check your website in a matter of seconds.

What to do

1. Review your WordPress administrator accounts. SOCRadar reports that CyberXero creates accounts named with the pattern wp2_ followed by a hexadecimal string (e.g. wp2_a3f9c1).
2. Update WordPress and its plugins, and remove any you don’t use. Turn on two-factor authentication for the admin panel.
3. Check your server for web shells: new PHP files in upload and theme directories.
4. If your company uses AI agents itself, protect their session logs the way you protect passwords. They contain commands, system addresses, and often credentials as well.

SecurHUB’s take

CyberXero illustrates what we have been warning about for a long time (see: AI as a weapon for cybercriminals): AI doesn’t invent new attacks, but it lets one person carry out as many of them as an entire team could before. At this pace, quarterly manual reviews are no longer enough. What’s needed is continuous monitoring and rapid response, which is exactly what our 24/7 SOC delivers.

Sources: SOCRadar, CERT Orange Polska — Threat Landscape, October 12, 2026, Check Point Research