News

CERT-UA: Fake Cloudflare Checks Deliver LunexStealer Malware

  • Pierluigi Paganini--Securityaffairs.com
  • published date: 2026-10-07 13:22:17 UTC

Over 100 hacked websites used fake Cloudflare checks to trick visitors into installing LunexStealer through ClickFix commands. The lure is the now-familiar ClickFix technique, dressed up as Cloudflare’s standard bot check. The fake page asks you to run a comm…

Continue Reading at Securityaffairs.com →