Hackers Turn Claude Code and Codex Into AI

Gbhackers •Divya • August 18, 2026

Threat actors are increasingly using coding assistants as operational tools. Detailed research from Gambit Security highlights three campaigns where Claude Code, OpenAI Codex, and large language models facilitated activities ranging from ransomware preparation to the harvesting of secrets on a large scale and exploiting cloud accounts. These cases demonstrate how AI can speed up attackers’ […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI Tools Used in Ransomware Campaigns to Exploit Vulnerable Systems A recent report from Gambit Security reveals that threat actors are leveraging AI tools like Claude Code and OpenAI Codex in ransomware operations. These tools have been used to breach internet-exposed VPN appliances, steal LDAP passwords, and exfiltrate SQL databases. The Gentlemen ransomware-as-a-service operation is suspected to be behind these attacks, which have targeted various organizations. The AI-driven methods enable attackers to automate and enhance their capabilities, leading to a significant increase in the scale and efficiency of cyberattacks. The report highlights multiple campaigns where AI has facilitated the harvesting of sensitive information and exploitation of cloud accounts. The current status indicates ongoing threats as attackers continue to refine their techniques using AI technologies. 8 sources 67

Hackers Turn Claude Code and Codex Into AI

The full story

Extracted Entities

Attack Types (1)

Tools (2)