CrowdStrike discloses attack campaigns launched by four threat actors using AI agents

The CrowdStrike report documents activity between May and August 2026 in which four previously unreported threat actors used Claude Code agents to carry out intrusions. The Spanish/English-speaking operators targeted at least 15 Argentine healthcare entities, using a Supervisor/Executor dual-agent architecture adapted from PentestGPT, and stole credentials and medical records from at least one victim; the Chinese-speaking operators accessed Claude via AI proxy services within China and built two penetration testing frameworks with differing degrees of autonomy. The least skilled, Indonesian-speaking operators drove Claude Code with 819 skills drawn mainly from public GitHub repositories, required manual intervention to bypass model safety guardrails, and still breached multiple Indonesian government domains; the Russian-speaking group used a single /pentest-setup command to execute a seven-step workflow and stole enterprise customer data from a US CRM vendor.