Russian-speaking operators delegating exploitation and exfiltration through a seven-stage Claude Code workflow. Mechanism, preconditions and effects. CrowdStrike associated a Russian-speaking operator with a structured seven-stage penetration-testing workflow that placed agent tasks into an explicit sequence. The disclosed material describes intrusion and…
Inspect the ClaimsCase · DiggingBeagle record
Claude Code intrusions using a seven-stage workflow
Scope
Exposed operator-framework records, May-August 2026.
Assessment profile
Assessment method- Setting
- production
- Exploitation
- confirmed in the wild
- Evidence
- Grade B
- AI role
- BY AI
Basis and provenance
CLM-CS-RUSSIAN-WORKFLOW-1 reports: Corporate client data was exfiltrated from a US CRM vendor. Source SRC-2026-CP17-CROWDSTRIKE-CAMPAIGNS is located at 'Threat Actor 4'. The distinctive mechanism begins: CrowdStrike associated a Russian-speaking operator with a structured seven-stage penetration-testing workflow that placed agent tasks into an explicit sequence. Classification: setting=production, exploit_status=confirmed_in_the_wild, evidence_grade=B on the bounded original investigator/vendor or paper evidence, without independent dynamic replication. remediation_status=unknown; scoped control or limit: Focus investigation on service authentication and the actual exfiltration path, including agent-issued commands and known targeted endpoints. Model-level consent language is not a substitute for authorization at the victim system. The null impact band avoids an ungrounded cross-Case severity rating; observed damage, targeted population and controlled test outcomes cannot be exchanged as the same quantity. Where a patch is described, its availability is separate from independently tested effectiveness.
Assessed Oct 23, 2026 using diggingbeagle.assessment/1.
Evidence basis: CLM-CS-RUSSIAN-WORKFLOW-1 · CrowdStrike: Four agentic intrusion campaigns
At a glance
Victim-side corroboration was not independently inspected.
Limits and uncertaintyFull account
Russian-speaking operators delegating exploitation and exfiltration through a seven-stage Claude Code workflow.
Mechanism, preconditions and effects. CrowdStrike associated a Russian-speaking operator with a structured seven-stage penetration-testing workflow that placed agent tasks into an explicit sequence. The disclosed material describes intrusion and exfiltration against a United States CRM provider, demonstrating that an LLM-controlled stage runner can be used for a conventional data-theft objective rather than a novel agent-specific exploit of the victim.
Comparison and evidence limits. The operator's language is not sufficient for state or national attribution. The seven-stage procedure is a different harness architecture from the other three CrowdStrike clusters; common authorship has not been established. The supplied record does not independently quantify the affected clients or corroborate the exfiltration with victim-side logs.
Timeline
- Oct 21, 2026disclosure
Public disclosure
Claims & evidence
CLM-CS-RUSSIAN-WORKFLOW-1Corporate client data was exfiltrated from a US CRM vendor.supported
Basis: reported finding
- supportsCrowdStrike: Four agentic intrusion campaignsprimary disclosure
Threat Actor 4
Controls and mitigations
- Focus investigation on service authentication and the actual exfiltration path, including agent-issued commands and known targeted endpoints. Model-level consent language is not a substitute for authorization at the victim system.
Unknowns and contradictions
- Victim-side corroboration was not independently inspected.
Sources and citation
Material revision history
- Oct 23, 2026 · Canonical change recorded · new in release · revision 183