CYBERSECURITYTRACKER
Permanent story citation

ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9489

As cited

Copy frozen at (site build).

threat intel

ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware

CERT-UA identified a ClickFix campaign targeting over 100 Ukrainian websites through fake Cloudflare verification pages. The scheme redirects visitors to a social engineering trap designed to distribute Lunex, an infostealer malware.

Why it matters: Organizations in Ukraine and those hosting content there face direct compromise risk; practitioners should monitor for fake Cloudflare pages and educate users on ClickFix tactics to prevent credential and data theft.

VendorsCloudflare
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware

CERT-UA identified a ClickFix campaign targeting over 100 Ukrainian websites through fake Cloudflare verification pages. The scheme redirects visitors to a social engineering trap designed to distribute Lunex, an infostealer malware.

Why it matters: Organizations in Ukraine and those hosting content there face direct compromise risk; practitioners should monitor for fake Cloudflare pages and educate users on ClickFix tactics to prevent credential and data theft.

VendorsCloudflare
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary