100 Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine CERTUA has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an informationstealing malware called LunexStealer aka Psychedelic Stealer The activity which was observed by the agency in September 2026 has been attributed to a threat cluster dubbed UAC0277 It did not disclose who the