Attack
An operator using AI agents compromised at least 15 healthcare entities based in Argentina.
According to a CrowdStrike report, the campaign observed between May and August 2026 uses PentestGPT and two Claude Code agents.
In about 20 minutes without other human guidance, an agent bypassed a block and obtained credentials from a domain controller.
During a session of about 12.5 minutes, an agent pivoted from a compromised organization to an internal server of another.