CyberXero is a Russian-speaking, financially motivated Initial Access Broker (IAB) active on Dark Web forums, including Dread and HackForums. The actor runs two parallel operations: an opportunistic global campaign that mass-exploits WordPress, Magento and other e-commerce platforms for access and payment data, and a directed campaign that conducts curated reconnaissance against Ukrainian energy and utilities organizations.
Dark Web Profile: CyberXero
About this summary. This is a short excerpt from the description that SOCRadar published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://socradar.io/blog/dark-web-profile-cyberxero/
Source attribution: headline and facts are from SOCRadar (socradar.io). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
You Might Be Someone Else’s AI Test Environment
Rogue AI agents hit Hugging Face, a U.S. Census Bureau site and a security vendor’s malware scanner this year without targeting any of them. Third-party risk programs…
KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key Theft
The KeyHunter Operation pairs LLM key theft with an academic fraud campaign that reaches Harvard alumni data, Stanford applications and 18 other universities. SOCRadar’s…
eMudhra kills its certificate business after researchers cracked its private keys in under a second
Indian certificate authority eMudhra said Thursday it will stop issuing SSL/TLS certificates days after researchers showed that the private keys securing eight of its…
CyberXero Used 51 AI Agents to Steal 628,000 Ukrainian Records
CyberXero used 51 AI agents to support cyberattacks, stealing 628,000 Ukrainian records, including sensitive data from energy infrastructure. CyberXero is an operation…
Infostealers Weekly Report: 2026-11-02 – 2026-11-09
InfoStealers Weekly Report – In this comprehensive report, we provide you with valuable insights into the most pressing threats facing organizations today. As…
AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research
An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.