Back to Feed
MalwareOct 7, 2026

100+ Ukrainian Websites Hacked to Install Lunex Stealer with ClickFix Lure

100+ Ukrainian websites hacked to install Lunex Stealer via fake Cloudflare checks.

Summary

A cyberattack has compromised over 100 Ukrainian websites, leveraging fake Cloudflare security checks to distribute the Lunex Stealer malware. The malware is designed to steal sensitive information including browser passwords, session tokens, and cryptocurrency wallet details from infected systems.

Indicators of Compromise

  • malware — Lunex Stealer

Entities

Unknown (threat_actor)ClickFix Lure (campaign)Cloudflare (product)