WORLDTECHTechnology SINGLE SOURCE
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
First reported Source: The Hacker NewsLast editorial activity
What happened
The Computer Emergency Response Team of Ukraine (CERT-UA (Center for Cyber Defense and Counterterrorism, Ukraine)) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware (software written to damage a system or steal from it) called LunexStealer (aka Psychedelic Stealer). The activity, which was observed by the agency in September 2026, has been attributed to a threat cluster dubbed UAC-0277. Cloudflare is an information and communications technology company based in San Francisco, founded in 2009.
Sources & evidence
- The Hacker News Reporting source
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer ↗
https://thehackernews.com/2026/10/100-compromised-websites-use-fake.html