<![CDATA[100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer]]>CERT-UA has uncovered a widespread campaign involving over 100 compromised websites that have been injected with malicious JavaScript. The goal is to deliver an information-stealing malware known as LunexStealer, which also goes by the alias Psychedelic Stealer.

The activity was observed by the agency in September 2026 and has been attributed to a threat cluster tracked as UAC-0277. The agency did not disclose who is behind the operation.

The compromised sites are used to display fake Cloudflare verification checks. These lure visitors into executing the malicious payload, which ultimately installs LunexStealer on their systems.

Source: The Hacker News

Has your organization encountered fake Cloudflare verification prompts in recent browsing activity, and how are you handling the risk?

]]>https://xploitlk.com/topic/598/100-compromised-websites-use-fake-cloudflare-checks-to-deliver-lunexstealerRSS for NodeTue, 27 Oct 2026 07:51:31 GMTWed, 07 Oct 2026 08:30:22 GMT60