100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer (aka Psychedelic Stealer).

The activity, which was observed by the agency in September 2026, has been attributed to a threat cluster dubbed UAC-0277. It did not disclose who the

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Attack Update: Top 5 Attack-IPs auf doode.info – 23.09.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 144.76.19.72 — 848 requests (recent log) 195.178.110.242 — 575 requests (recent log) 34.52.146.37 — 479 requests (recent

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT),

Franken.domains: Stitched-Together Domains, Because Every .com Is Taken

Franken.domains: Stitched-Together Domains, Because Every .com Is Taken Source: Hacker News