MalwareOct 7, 2026
100+ Ukrainian Websites Hacked to Install Lunex Stealer with ClickFix Lure
100+ Ukrainian websites hacked to install Lunex Stealer via fake Cloudflare checks.
Summary
A cyberattack has compromised over 100 Ukrainian websites, leveraging fake Cloudflare security checks to distribute the Lunex Stealer malware. The malware is designed to steal sensitive information including browser passwords, session tokens, and cryptocurrency wallet details from infected systems.
Indicators of Compromise
- malware — Lunex Stealer
Entities
Unknown (threat_actor)ClickFix Lure (campaign)Cloudflare (product)