CrowdStrike: Four Previously Unreported Actors Ran Claude Code-Based Intrusion Agents Against Healthcare, Government, and SaaS Targets

At least 15 Argentine healthcare entities, government domains in Indonesia and other countries, private firms in Brazil and the US, and a US CRM vendor

CrowdStrike found four operators' toolkits in exposed directories, with activity from May to August 2026. A Spanish/English-speaking actor used a PentestGPT-derived harness with a Claude Code "Supervisor" and an "Executor" agent, and stole credentials and medical records from at least one Argentine provider. A Chinese-speaking actor reached Claude through a China-based proxy and built two harnesses against 20+ named targets, including two foreign governments. An Indonesian-speaking actor loaded Claude Code with 819 skills, mostly from the public claude-red repository. A Russian-speaking actor's `/pentest-setup` slash command launched a seven-step workflow ending in exfiltration and stole client data from a US CRM vendor. Single source

General-purpose coding agents plus public offensive skill packs and harnesses let individual operators run multi-stage intrusions with little custom tooling