2026-10-21 · 2026-Q4
CrowdStrike: Four Previously Unreported Actors Ran Claude Code-Based Intrusion Agents Against Healthcare, Government, and SaaS Targets
Outside the model: Offensive use Agent tooling was not the attack surface, so no layer applies.
- Fixable:
- Unknown
- Vendor response:
- Unknown
- In the wild:
- Yes
Target
At least 15 Argentine healthcare entities, government domains in Indonesia and other countries, private firms in Brazil and the US, and a US CRM vendor
Impact
CrowdStrike found four operators' toolkits in exposed directories, with activity from May to August 2026. A Spanish/English-speaking actor used a PentestGPT-derived harness with a Claude Code "Supervisor" and an "Executor" agent, and stole credentials and medical records from at least one Argentine provider. A Chinese-speaking actor reached Claude through a China-based proxy and built two harnesses against 20+ named targets, including two foreign governments. An Indonesian-speaking actor loaded Claude Code with 819 skills, mostly from the public claude-red repository. A Russian-speaking actor's `/pentest-setup` slash command launched a seven-step workflow ending in exfiltration and stole client data from a US CRM vendor. Single source
Root Cause
General-purpose coding agents plus public offensive skill packs and harnesses let individual operators run multi-stage intrusions with little custom tooling