> TritonInfoSec News
Home / Oct 08, 2026 / Story
0
#8 The Hacker News general October 07, 2026 at 06:57 UTC

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

By [email protected] (The Hacker News)

AI Summary

CERT-UA identified over 100 compromised Ukrainian websites injected with malicious JavaScript serving LunexStealer (also known as Psychedelic Stealer), in a ClickFix-style campaign that uses fake Cloudflare verification pages. The activity, observed in September 2026, has been attributed to threat cluster UAC-0277. The technique of abusing trusted infrastructure prompts to deliver infostealers continues to evolve, making it difficult for end users to distinguish legitimate browser security checks from malicious ones.

Read full article → https://thehackernews.com/2026/10/100-compromised-…

Relevance score: 74.0/100

# More from October 08

  1. 1
    FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials The Hacker News
  2. 2
    Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details The Hacker News
  3. 3
    SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances The Hacker News
  4. 4
    Hackers hijack Google domains after breaching ccTLD registries BleepingComputer
  5. 5
    ShinyHunters Extorted Boeing Spin-off Prior to Arrests Krebs on Security
  6. 6
    Senate passes healthcare cybersecurity bill after 190 million impacted by Change Healthcare breach The Record
  7. 7
    US posts $10 million reward for accused Chinese ‘Hafnium’ hacker The Record
  8. 9
    Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer The Hacker News
  9. 10
    Chrome 155 Update Patches 247 Vulnerabilities SecurityWeek